ent_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2147.232045] FAULT_INJECTION: forcing a failure.
[ 2147.232045] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.234526] CPU: 1 PID: 13109 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2147.235913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2147.237638] Call Trace:
[ 2147.238180]  dump_stack+0x107/0x167
[ 2147.238931]  should_fail.cold+0x5/0xa
[ 2147.239701]  ? create_object.isra.0+0x3a/0xa20
[ 2147.240618]  should_failslab+0x5/0x20
[ 2147.241402]  kmem_cache_alloc+0x5b/0x310
[ 2147.242218]  ? mark_held_locks+0x9e/0xe0
[ 2147.243034]  create_object.isra.0+0x3a/0xa20
[ 2147.243910]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2147.244945]  kmem_cache_alloc_bulk+0x168/0x320
[ 2147.245222] FAULT_INJECTION: forcing a failure.
[ 2147.245222] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.245859]  io_submit_sqes+0x6f76/0x85c0
[ 2147.245885]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2147.248920]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.249910]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.250871]  ? lock_downgrade+0x6d0/0x6d0
[ 2147.251691]  ? find_held_lock+0x2c/0x110
[ 2147.252503]  ? io_submit_sqes+0x85c0/0x85c0
[ 2147.253381]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2147.254343]  ? wait_for_completion_io+0x270/0x270
[ 2147.255302]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2147.256225]  ? vfs_write+0x354/0xa70
[ 2147.257003]  ? fput_many+0x2f/0x1a0
[ 2147.257733]  ? ksys_write+0x1a9/0x260
[ 2147.258511]  ? __ia32_sys_read+0xb0/0xb0
[ 2147.259325]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2147.260404]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2147.261450]  do_syscall_64+0x33/0x40
[ 2147.262213]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2147.263234] RIP: 0033:0x7fca01abfb19
[ 2147.263998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2147.267653] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2147.269179] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2147.270605] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2147.272018] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2147.273454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2147.274891] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2147.276337] CPU: 0 PID: 13119 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2147.277136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2147.278135] Call Trace:
[ 2147.278435]  dump_stack+0x107/0x167
[ 2147.278828]  should_fail.cold+0x5/0xa
[ 2147.279244]  ? create_object.isra.0+0x3a/0xa20
[ 2147.279747]  should_failslab+0x5/0x20
[ 2147.280163]  kmem_cache_alloc+0x5b/0x310
[ 2147.280603]  ? mark_held_locks+0x9e/0xe0
[ 2147.281055]  create_object.isra.0+0x3a/0xa20
[ 2147.281543]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2147.282125]  kmem_cache_alloc_bulk+0x168/0x320
[ 2147.282640]  io_submit_sqes+0x6f76/0x85c0
[ 2147.283109]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2147.283667]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.284227]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.284778]  ? lock_downgrade+0x6d0/0x6d0
[ 2147.285246]  ? find_held_lock+0x2c/0x110
[ 2147.285690]  ? io_submit_sqes+0x85c0/0x85c0
[ 2147.286179]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2147.286692]  ? wait_for_completion_io+0x270/0x270
[ 2147.287237]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2147.287754]  ? vfs_write+0x354/0xa70
[ 2147.288169]  ? fput_many+0x2f/0x1a0
[ 2147.288586]  ? ksys_write+0x1a9/0x260
[ 2147.289023]  ? __ia32_sys_read+0xb0/0xb0
[ 2147.289484]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2147.290056]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2147.290634]  do_syscall_64+0x33/0x40
[ 2147.291071]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2147.291641] RIP: 0033:0x7f3e76317b19
[ 2147.292042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2147.294088] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2147.294945] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2147.295740] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2147.296521] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2147.297322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2147.298089] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2147.314405] isofs_fill_super: get root inode failed
[ 2147.329314] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:40:37 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:40:37 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "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"}}, 0x407)

[ 2147.377118] sg_write: data in/out 1426063324/845 bytes for SCSI command 0xfb-- guessing data in;
[ 2147.377118]    program syz-executor.4 not setting count and/or reply_len properly
07:40:37 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

07:40:37 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43"}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:40:37 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:40:37 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cef", 0xa, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:40:37 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])
pipe(&(0x7f0000000840))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x202580, 0x0)

[ 2147.445904] FAULT_INJECTION: forcing a failure.
[ 2147.445904] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.448530] CPU: 1 PID: 13131 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2147.449987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2147.451692] Call Trace:
[ 2147.452258]  dump_stack+0x107/0x167
[ 2147.453032]  should_fail.cold+0x5/0xa
[ 2147.453832]  ? create_object.isra.0+0x3a/0xa20
[ 2147.454788]  should_failslab+0x5/0x20
[ 2147.455581]  kmem_cache_alloc+0x5b/0x310
[ 2147.456419]  ? mark_held_locks+0x9e/0xe0
[ 2147.457272]  create_object.isra.0+0x3a/0xa20
[ 2147.458176]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2147.459219]  kmem_cache_alloc_bulk+0x168/0x320
[ 2147.460166]  io_submit_sqes+0x6f76/0x85c0
[ 2147.461032]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2147.462054]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.463075]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2147.464114]  ? lock_downgrade+0x6d0/0x6d0
[ 2147.465156]  ? find_held_lock+0x2c/0x110
[ 2147.466151]  ? io_submit_sqes+0x85c0/0x85c0
[ 2147.467220]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2147.467246]  ? wait_for_completion_io+0x270/0x270
[ 2147.467270]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2147.467286]  ? vfs_write+0x354/0xa70
[ 2147.467309]  ? fput_many+0x2f/0x1a0
[ 2147.467329]  ? ksys_write+0x1a9/0x260
[ 2147.467349]  ? __ia32_sys_read+0xb0/0xb0
[ 2147.467374]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2147.467391]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2147.467417]  do_syscall_64+0x33/0x40
[ 2147.467439]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2147.467452] RIP: 0033:0x7fca01abfb19
[ 2147.467472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2147.467483] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2147.467505] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2147.467516] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2147.467527] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2147.467538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2147.467550] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2147.506019] isofs_fill_super: get root inode failed
[ 2147.507702] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[ 2160.937403] FAULT_INJECTION: forcing a failure.
[ 2160.937403] name failslab, interval 1, probability 0, space 0, times 0
[ 2160.939463] CPU: 1 PID: 13152 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2160.940653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2160.942099] Call Trace:
[ 2160.942564]  dump_stack+0x107/0x167
[ 2160.943203]  should_fail.cold+0x5/0xa
[ 2160.943869]  ? create_object.isra.0+0x3a/0xa20
[ 2160.944661]  should_failslab+0x5/0x20
[ 2160.945341]  kmem_cache_alloc+0x5b/0x310
[ 2160.946041]  ? mark_held_locks+0x9e/0xe0
[ 2160.946746]  create_object.isra.0+0x3a/0xa20
[ 2160.947504]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2160.948246]  kmem_cache_alloc_bulk+0x168/0x320
[ 2160.949049]  io_submit_sqes+0x6f76/0x85c0
[ 2160.949773]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2160.950626]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2160.951479]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2160.952318]  ? lock_downgrade+0x6d0/0x6d0
[ 2160.953045]  ? find_held_lock+0x2c/0x110
[ 2160.953755]  ? io_submit_sqes+0x85c0/0x85c0
[ 2160.954511]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2160.955343]  ? wait_for_completion_io+0x270/0x270
[ 2160.956172]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2160.956994]  ? vfs_write+0x354/0xa70
[ 2160.957650]  ? fput_many+0x2f/0x1a0
[ 2160.958277]  ? ksys_write+0x1a9/0x260
[ 2160.958938]  ? __ia32_sys_read+0xb0/0xb0
[ 2160.959641]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2160.960543]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2160.961449]  do_syscall_64+0x33/0x40
[ 2160.962095]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2160.962979] RIP: 0033:0x7fca01abfb19
[ 2160.963614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2160.966555] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2160.967546] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2160.968693] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2160.969792] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2160.970723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2160.971647] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:40:51 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:40:51 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:40:51 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

07:40:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:40:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:40:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])
pipe(&(0x7f0000000840))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x202580, 0x0)

07:40:51 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:40:51 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

[ 2161.001607] isofs_fill_super: get root inode failed
[ 2161.009419] FAULT_INJECTION: forcing a failure.
[ 2161.009419] name failslab, interval 1, probability 0, space 0, times 0
[ 2161.012798] CPU: 0 PID: 13162 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2161.014452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2161.016433] Call Trace:
[ 2161.017091]  dump_stack+0x107/0x167
[ 2161.017986]  should_fail.cold+0x5/0xa
[ 2161.018914]  ? create_object.isra.0+0x3a/0xa20
[ 2161.020043]  should_failslab+0x5/0x20
[ 2161.020995]  kmem_cache_alloc+0x5b/0x310
[ 2161.021982]  ? mark_held_locks+0x9e/0xe0
[ 2161.022815]  create_object.isra.0+0x3a/0xa20
[ 2161.023705]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2161.024730]  kmem_cache_alloc_bulk+0x168/0x320
[ 2161.025673]  io_submit_sqes+0x6f76/0x85c0
[ 2161.026519]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2161.027537]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.028556]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.029550]  ? lock_downgrade+0x6d0/0x6d0
[ 2161.030391]  ? find_held_lock+0x2c/0x110
[ 2161.031226]  ? io_submit_sqes+0x85c0/0x85c0
[ 2161.032127]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2161.033124]  ? wait_for_completion_io+0x270/0x270
[ 2161.034110]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2161.035049]  ? vfs_write+0x354/0xa70
[ 2161.035813]  ? fput_many+0x2f/0x1a0
[ 2161.036549]  ? ksys_write+0x1a9/0x260
[ 2161.037329]  ? __ia32_sys_read+0xb0/0xb0
[ 2161.038154]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2161.039216]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2161.040274]  do_syscall_64+0x33/0x40
[ 2161.041052]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2161.042080] RIP: 0033:0x7f3e76317b19
[ 2161.042835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2161.046568] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2161.048125] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2161.049593] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2161.051054] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2161.052524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2161.053975] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:40:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2161.108215] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:40:51 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

07:40:51 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:40:51 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:40:51 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

[ 2161.185043] FAULT_INJECTION: forcing a failure.
[ 2161.185043] name failslab, interval 1, probability 0, space 0, times 0
07:40:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2161.187890] CPU: 0 PID: 13178 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2161.189406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2161.191075] Call Trace:
[ 2161.191632]  dump_stack+0x107/0x167
[ 2161.192534]  should_fail.cold+0x5/0xa
[ 2161.193473]  ? create_object.isra.0+0x3a/0xa20
[ 2161.194600]  should_failslab+0x5/0x20
[ 2161.195531]  kmem_cache_alloc+0x5b/0x310
[ 2161.196495]  ? mark_held_locks+0x9e/0xe0
[ 2161.197497]  create_object.isra.0+0x3a/0xa20
[ 2161.198564]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2161.199644]  kmem_cache_alloc_bulk+0x168/0x320
[ 2161.200618]  io_submit_sqes+0x6f76/0x85c0
[ 2161.201481]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2161.202504]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.203202] FAULT_INJECTION: forcing a failure.
[ 2161.203202] name failslab, interval 1, probability 0, space 0, times 0
[ 2161.203544]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.203571]  ? lock_downgrade+0x6d0/0x6d0
[ 2161.203594]  ? find_held_lock+0x2c/0x110
[ 2161.207745]  ? io_submit_sqes+0x85c0/0x85c0
[ 2161.208651]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2161.209657]  ? wait_for_completion_io+0x270/0x270
[ 2161.210672]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2161.211650]  ? vfs_write+0x354/0xa70
[ 2161.212413]  ? fput_many+0x2f/0x1a0
[ 2161.213158]  ? ksys_write+0x1a9/0x260
[ 2161.213927]  ? __ia32_sys_read+0xb0/0xb0
[ 2161.214746]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2161.215805]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2161.216848]  do_syscall_64+0x33/0x40
[ 2161.217624]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2161.218650] RIP: 0033:0x7f3e76317b19
[ 2161.219418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2161.223106] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2161.224645] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2161.226077] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2161.227492] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2161.228914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2161.230363] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2161.231822] CPU: 1 PID: 13184 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2161.232724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2161.233800] Call Trace:
[ 2161.234141]  dump_stack+0x107/0x167
[ 2161.234614]  should_fail.cold+0x5/0xa
[ 2161.235090]  ? create_object.isra.0+0x3a/0xa20
[ 2161.235711]  should_failslab+0x5/0x20
[ 2161.236193]  kmem_cache_alloc+0x5b/0x310
[ 2161.236756]  ? mark_held_locks+0x9e/0xe0
[ 2161.237267]  create_object.isra.0+0x3a/0xa20
[ 2161.237829]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2161.238454]  kmem_cache_alloc_bulk+0x168/0x320
[ 2161.239048]  io_submit_sqes+0x6f76/0x85c0
[ 2161.239570]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2161.240204]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.240822]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2161.241491]  ? lock_downgrade+0x6d0/0x6d0
[ 2161.242016]  ? find_held_lock+0x2c/0x110
[ 2161.242576]  ? io_submit_sqes+0x85c0/0x85c0
[ 2161.243142]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2161.243809]  ? wait_for_completion_io+0x270/0x270
[ 2161.244430]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2161.245080]  ? vfs_write+0x354/0xa70
[ 2161.245561]  ? fput_many+0x2f/0x1a0
[ 2161.246027]  ? ksys_write+0x1a9/0x260
[ 2161.246544]  ? __ia32_sys_read+0xb0/0xb0
[ 2161.247066]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2161.247770]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2161.248434]  do_syscall_64+0x33/0x40
[ 2161.248941]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2161.249594] RIP: 0033:0x7fca01abfb19
[ 2161.250096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2161.252415] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2161.253454] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2161.254418] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2161.255327] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2161.256295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2161.257280] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:40:51 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:40:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])
pipe(&(0x7f0000000840))

07:40:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2161.315328] isofs_fill_super: get root inode failed
[ 2161.387557] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:41:06 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

07:41:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])
pipe(&(0x7f0000000840))

07:41:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "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"}}, 0x207)

07:41:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:41:06 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:06 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, 0x0)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2175.669921] sg_write: data in/out 1426063324/333 bytes for SCSI command 0xfb-- guessing data in;
[ 2175.669921]    program syz-executor.4 not setting count and/or reply_len properly
[ 2175.679126] FAULT_INJECTION: forcing a failure.
[ 2175.679126] name failslab, interval 1, probability 0, space 0, times 0
[ 2175.680768] CPU: 0 PID: 13206 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2175.681750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2175.682922] Call Trace:
[ 2175.683309]  dump_stack+0x107/0x167
[ 2175.683832]  should_fail.cold+0x5/0xa
[ 2175.684379]  ? __io_queue_sqe+0x666/0x9d0
[ 2175.684963]  should_failslab+0x5/0x20
[ 2175.685510]  kmem_cache_alloc_trace+0x55/0x320
[ 2175.686160]  __io_queue_sqe+0x666/0x9d0
[ 2175.686727]  ? io_issue_sqe+0x7700/0x7700
[ 2175.687312]  ? io_prep_rw+0x7f5/0x1050
[ 2175.687867]  io_submit_sqes+0x4461/0x85c0
[ 2175.688484]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2175.689198]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2175.689885]  ? lock_downgrade+0x6d0/0x6d0
[ 2175.690468]  ? find_held_lock+0x2c/0x110
[ 2175.691050]  ? io_submit_sqes+0x85c0/0x85c0
[ 2175.691664]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2175.692352]  ? wait_for_completion_io+0x270/0x270
[ 2175.693035]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2175.693697]  ? vfs_write+0x354/0xa70
[ 2175.694230]  ? fput_many+0x2f/0x1a0
[ 2175.694747]  ? ksys_write+0x1a9/0x260
[ 2175.695288]  ? __ia32_sys_read+0xb0/0xb0
[ 2175.695313]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2175.696907]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2175.697660]  do_syscall_64+0x33/0x40
[ 2175.698186]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2175.698904] RIP: 0033:0x7fca01abfb19
[ 2175.699428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2175.702007] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2175.703084] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2175.704079] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2175.705076] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2175.706086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2175.707083] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2175.711202] FAULT_INJECTION: forcing a failure.
[ 2175.711202] name failslab, interval 1, probability 0, space 0, times 0
[ 2175.713404] CPU: 0 PID: 13216 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2175.714375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2175.715543] Call Trace:
[ 2175.715928]  dump_stack+0x107/0x167
[ 2175.716469]  should_fail.cold+0x5/0xa
[ 2175.717023]  ? create_object.isra.0+0x3a/0xa20
[ 2175.717697]  ? create_object.isra.0+0x3a/0xa20
[ 2175.718367]  should_failslab+0x5/0x20
[ 2175.718922]  kmem_cache_alloc+0x5b/0x310
[ 2175.719526]  ? mark_held_locks+0x9e/0xe0
[ 2175.720105]  create_object.isra.0+0x3a/0xa20
[ 2175.720726]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2175.721474]  kmem_cache_alloc_bulk+0x168/0x320
[ 2175.722124]  io_submit_sqes+0x6f76/0x85c0
[ 2175.722718]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2175.723419]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2175.724123]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2175.724811]  ? lock_downgrade+0x6d0/0x6d0
[ 2175.725418]  ? find_held_lock+0x2c/0x110
[ 2175.725998]  ? io_submit_sqes+0x85c0/0x85c0
[ 2175.726616]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2175.727300]  ? wait_for_completion_io+0x270/0x270
[ 2175.727977]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2175.728628]  ? vfs_write+0x354/0xa70
[ 2175.729162]  ? fput_many+0x2f/0x1a0
[ 2175.729678]  ? ksys_write+0x1a9/0x260
[ 2175.730218]  ? __ia32_sys_read+0xb0/0xb0
[ 2175.730798]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2175.731535]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2175.732264]  do_syscall_64+0x33/0x40
[ 2175.732787]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2175.733532] RIP: 0033:0x7f3e76317b19
[ 2175.734064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2175.736648] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2175.737734] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2175.738748] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2175.739757] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2175.740770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2175.741784] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2175.744594] isofs_fill_super: get root inode failed
[ 2175.768851] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:41:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:06 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])

07:41:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

[ 2175.992254] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2176.001405] FAULT_INJECTION: forcing a failure.
[ 2176.001405] name failslab, interval 1, probability 0, space 0, times 0
[ 2176.003253] CPU: 0 PID: 13245 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2176.004200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2176.005329] Call Trace:
[ 2176.005708]  dump_stack+0x107/0x167
[ 2176.006209]  should_fail.cold+0x5/0xa
[ 2176.006742]  ? create_object.isra.0+0x3a/0xa20
[ 2176.007375]  should_failslab+0x5/0x20
[ 2176.007905]  kmem_cache_alloc+0x5b/0x310
[ 2176.008463]  create_object.isra.0+0x3a/0xa20
[ 2176.009211]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2176.009919]  kmem_cache_alloc_trace+0x151/0x320
[ 2176.010563]  __io_queue_sqe+0x666/0x9d0
[ 2176.011104]  ? io_issue_sqe+0x7700/0x7700
[ 2176.011677]  ? io_prep_rw+0x7f5/0x1050
[ 2176.012215]  io_submit_sqes+0x4461/0x85c0
[ 2176.012802]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2176.013485]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2176.014171]  ? lock_downgrade+0x6d0/0x6d0
[ 2176.014733]  ? find_held_lock+0x2c/0x110
[ 2176.015289]  ? io_submit_sqes+0x85c0/0x85c0
[ 2176.015880]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2176.016541]  ? wait_for_completion_io+0x270/0x270
[ 2176.017210]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2176.017847]  ? vfs_write+0x354/0xa70
[ 2176.018360]  ? fput_many+0x2f/0x1a0
[ 2176.018851]  ? ksys_write+0x1a9/0x260
[ 2176.019374]  ? __ia32_sys_read+0xb0/0xb0
[ 2176.019909]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2176.020626]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2176.021346]  do_syscall_64+0x33/0x40
[ 2176.021856]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2176.022553] RIP: 0033:0x7fca01abfb19
[ 2176.023078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2176.025590] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2176.026619] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2176.027591] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2176.028574] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2176.029565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2176.030547] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2176.038115] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[ 2192.534557] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
07:41:22 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:22 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:22 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0xa, &(0x7f00000005c0)=[{&(0x7f0000000080)="99544eb9fe16e1486ba8c44e", 0xc, 0xffffffffffffffff}, {&(0x7f00000000c0)="61943f27888fc1bf169ca986b47f5cde9d983030df7032fb9750645130aa0e5826ab4877d15053838063f3910cd7c29de18eb0af2bbf734befdb3902f3fdb788f7ccd2ccf1698100ce5473635ad10b66f97e1ff6b67c746c1c36262aba3a9bc7e47d50389fc93afd4071d351338819e8a81e411bfc03541c958c32499c3d68", 0x7f, 0x8}, {&(0x7f0000000180)="258c75a677dd08034572", 0xa, 0x200}, {&(0x7f00000001c0)="74dd490061c6ed5150e6c7dd99724226918b294a99764d7f1612de3ddec8343e84de31005322ddcf209567636676cf28d9833416992dc588534d6dff0e15fcad5e02d69f610b191e075b7095a5f2ab1d438cbf970913da2abbef2a6ad90c7e95d708a5cafbf0cac93280217734c0f78ceb0b9ff8630c", 0x76, 0x5}, {&(0x7f0000000240)="2c769c1cba0f008eee2f24ea206707103054f75f300ee75a146eb3556011b9eec218a4d29503e81d549012291702baab9f639c83b30c19603a03ed4d4ee8109e5f274751513ceafdb7829dc992dd914894096dca494e5c1191276f4a30eec1023f30de049adf17fb2686b523bbee35c99046a531fcf795d87b6ea2d05a03ffcea9a08dbea16210bde2b1301b58d1f8f206cd253943cbcae0a19057b4ef0dfe11794e44066fa31a223d1d58afb391dff0b327", 0xb2, 0x80000001}, {&(0x7f0000000300)="9f197c2bba10e1a11f0187a7c3dfe792d0286f33a53ead733dfed7", 0x1b, 0x3}, {&(0x7f0000000340)="c1520515d36f78783f1d1e18fa0261bb27f2af1c949bf61204634253cd6006067fe7c432bb544119a7abafe205f0ba65a586648b7c3e32667fcdabd36cf7fdda8b59", 0x42, 0x3}, {&(0x7f00000003c0)="83f7a392f3c92c7d518684914bfb94a29d3c6c0d8f280a5f6d6270ee8427e7bef135e09c982c74d677d25e75c4f0d706bc47db551bcdf9724ec3442b5ad21b7af86a69b8d2b7c2023e1486c094d295a7b7da98071466d3e6aea9157f22df33f0f54c61723b749c4b6c80cf78f40122fc331b24dc2f50110e4e6d5f23034c64fe0665a7850ea7ec8ed7380fb9c01757a32b330ae53b9acab094340c49b488a1c96b02c8df1258", 0xa6, 0x2}, {&(0x7f0000000480)="19fd098bec35f9ce1bf144c9d007b4215086fe38b8375c3a32d0205bc5483c65fba1c2d8936c9710143ff805bbe35a187a281358851f22edf52ad61b8a5f9594d7763040d9756a593e2764b49b6139da400805e1d9c4f273536d70314b53a77ed1c0ddb096d2ce4de3f497575e04196853a05e9d8d07353f0f4981932d5afcda8fc7df22fda6eb3b", 0x88, 0x200}, {&(0x7f0000000540)="ffd894aa77003f3b3501827f183b8a8ae002d40dd91d0d33c87cf0002c2a9229d57dc50b6baa302b688d924e0cb203d6eb4d5030504ec0895caceacba816ca463d0cf9eb9ec1a5c12ea357e276cced4c9ac00f988d17d03e96ae911769edbd5bf76f9e51b9c009f788ff7a247bb27ab08036a2e6716aaf6d5c104830f1d4", 0x7e, 0x3}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB='errors=remount-ro,init_itable,noinit_itable,auto_da_alloc=0x0000000000000008,barrier=0x0000000000008001,test_dummy_encryption,barrier=0x00000000000000ff,bsddf,debug,smackfshat=/dev/sg#\x00,uid=', @ANYRESDEC, @ANYBLOB="2c736d61636b66737472616e736d7574653d3a2c646f6e745f6d6561737572652c636f6e746578743d757365725f752c6d61736b3d4d41595f415050454e442c003df337728f040397a6a0a867d21420872cf8fecd8367166efe1ac78ea80cb95d3dcf3163fa779fcce63ab01a037492782627cc72ba316dfad23b8bd5ef023c90d9ea94dd8230cd"])

07:41:22 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:22 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:23 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:41:23 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:23 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:41:23 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:23 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)

[ 2192.590875] FAULT_INJECTION: forcing a failure.
[ 2192.590875] name failslab, interval 1, probability 0, space 0, times 0
[ 2192.593424] CPU: 1 PID: 13267 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2192.594799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2192.596488] Call Trace:
[ 2192.597023]  dump_stack+0x107/0x167
[ 2192.597787]  should_fail.cold+0x5/0xa
[ 2192.598562]  ? create_io_worker+0xe8/0x620
[ 2192.599397]  ? create_io_worker+0xe8/0x620
[ 2192.600268]  should_failslab+0x5/0x20
[ 2192.601033]  kmem_cache_alloc_node_trace+0x59/0x340
[ 2192.602078]  create_io_worker+0xe8/0x620
[ 2192.602897]  io_wqe_enqueue+0x69e/0xbe0
[ 2192.603725]  ? create_worker_cb+0x260/0x260
[ 2192.604587]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2192.605526]  ? io_prep_async_work+0x34e/0x540
[ 2192.606433]  io_queue_async_work+0x26b/0x4f0
[ 2192.607333]  __io_queue_sqe+0x5cc/0x9d0
[ 2192.608148]  ? io_issue_sqe+0x7700/0x7700
[ 2192.608990]  ? io_poll_queue_proc+0x50/0x50
[ 2192.609878]  ? io_prep_rw+0x7f5/0x1050
[ 2192.610676]  io_submit_sqes+0x4461/0x85c0
[ 2192.611554]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.612564]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.613570]  ? lock_downgrade+0x6d0/0x6d0
[ 2192.614407]  ? find_held_lock+0x2c/0x110
[ 2192.615237]  ? io_submit_sqes+0x85c0/0x85c0
[ 2192.616119]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2192.617099]  ? wait_for_completion_io+0x270/0x270
[ 2192.618084]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2192.619021]  ? vfs_write+0x354/0xa70
[ 2192.619779]  ? fput_many+0x2f/0x1a0
[ 2192.620515]  ? ksys_write+0x1a9/0x260
[ 2192.621285]  ? __ia32_sys_read+0xb0/0xb0
[ 2192.622119]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2192.623177]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2192.624224]  do_syscall_64+0x33/0x40
[ 2192.624979]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2192.626035] RIP: 0033:0x7fca01abfb19
[ 2192.626791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2192.630508] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2192.632048] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2192.633498] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2192.634943] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2192.636384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2192.637843] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2192.659331] FAULT_INJECTION: forcing a failure.
[ 2192.659331] name failslab, interval 1, probability 0, space 0, times 0
[ 2192.661988] CPU: 1 PID: 13273 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2192.663389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2192.665073] Call Trace:
07:41:23 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2192.665640]  dump_stack+0x107/0x167
[ 2192.666513]  should_fail.cold+0x5/0xa
[ 2192.667289]  ? __io_queue_sqe+0x666/0x9d0
[ 2192.668131]  should_failslab+0x5/0x20
[ 2192.668908]  kmem_cache_alloc_trace+0x55/0x320
[ 2192.669856]  __io_queue_sqe+0x666/0x9d0
[ 2192.670675]  ? io_issue_sqe+0x7700/0x7700
[ 2192.671522]  ? io_prep_rw+0x7f5/0x1050
[ 2192.672319]  io_submit_sqes+0x4461/0x85c0
[ 2192.673197]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.674224]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.675205]  ? lock_downgrade+0x6d0/0x6d0
[ 2192.676042]  ? find_held_lock+0x2c/0x110
[ 2192.676873]  ? io_submit_sqes+0x85c0/0x85c0
[ 2192.677764]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2192.678750]  ? wait_for_completion_io+0x270/0x270
[ 2192.679728]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2192.680667]  ? vfs_write+0x354/0xa70
[ 2192.681434]  ? fput_many+0x2f/0x1a0
[ 2192.682173]  ? ksys_write+0x1a9/0x260
[ 2192.682947]  ? __ia32_sys_read+0xb0/0xb0
[ 2192.683776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
07:41:23 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)

[ 2192.684835]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2192.685986]  do_syscall_64+0x33/0x40
[ 2192.686745]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2192.687784] RIP: 0033:0x7f3e76317b19
[ 2192.688543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2192.692281] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2192.693841] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2192.695285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2192.696729] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2192.698183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2192.699628] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:41:23 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2192.727774] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:41:23 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

07:41:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "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"}}, 0x107)

[ 2192.798200] FAULT_INJECTION: forcing a failure.
[ 2192.798200] name failslab, interval 1, probability 0, space 0, times 0
[ 2192.799586] CPU: 0 PID: 13291 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2192.800325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2192.800330] Call Trace:
[ 2192.800351]  dump_stack+0x107/0x167
[ 2192.800366]  should_fail.cold+0x5/0xa
[ 2192.800381]  ? create_object.isra.0+0x3a/0xa20
[ 2192.800395]  should_failslab+0x5/0x20
07:41:23 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2192.800406]  kmem_cache_alloc+0x5b/0x310
[ 2192.800421]  create_object.isra.0+0x3a/0xa20
[ 2192.800431]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2192.800446]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2192.800464]  create_io_worker+0xe8/0x620
07:41:23 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:23 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:23 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)

07:41:23 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2192.800478]  io_wqe_enqueue+0x69e/0xbe0
[ 2192.800492]  ? create_worker_cb+0x260/0x260
[ 2192.800504]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2192.800519]  ? io_prep_async_work+0x34e/0x540
[ 2192.800534]  io_queue_async_work+0x26b/0x4f0
[ 2192.800549]  __io_queue_sqe+0x5cc/0x9d0
[ 2192.800564]  ? io_issue_sqe+0x7700/0x7700
[ 2192.800574]  ? io_poll_queue_proc+0x50/0x50
[ 2192.800587]  ? io_prep_rw+0x7f5/0x1050
[ 2192.800601]  io_submit_sqes+0x4461/0x85c0
[ 2192.800631]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.800641]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.800657]  ? lock_downgrade+0x6d0/0x6d0
[ 2192.800666]  ? find_held_lock+0x2c/0x110
[ 2192.800680]  ? io_submit_sqes+0x85c0/0x85c0
[ 2192.800695]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2192.800708]  ? wait_for_completion_io+0x270/0x270
[ 2192.800721]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2192.800730]  ? vfs_write+0x354/0xa70
[ 2192.800743]  ? fput_many+0x2f/0x1a0
[ 2192.800754]  ? ksys_write+0x1a9/0x260
[ 2192.800764]  ? __ia32_sys_read+0xb0/0xb0
[ 2192.800778]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2192.800787]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2192.800802]  do_syscall_64+0x33/0x40
[ 2192.800813]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2192.800821] RIP: 0033:0x7fca01abfb19
[ 2192.800832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2192.800838] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2192.800850] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2192.800856] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2192.800863] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2192.800869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2192.800875] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2192.809856] sg_write: data in/out 1426063324/77 bytes for SCSI command 0xfb-- guessing data in;
[ 2192.809856]    program syz-executor.4 not setting count and/or reply_len properly
[ 2192.917241] FAULT_INJECTION: forcing a failure.
[ 2192.917241] name failslab, interval 1, probability 0, space 0, times 0
[ 2192.934378] CPU: 0 PID: 13304 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2192.934396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2192.936955] Call Trace:
[ 2192.937257]  dump_stack+0x107/0x167
[ 2192.937673]  should_fail.cold+0x5/0xa
[ 2192.938092]  ? copy_process+0x5d2/0x7800
[ 2192.938540]  should_failslab+0x5/0x20
[ 2192.938959]  kmem_cache_alloc_node+0x55/0x330
[ 2192.939457]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2192.939951]  copy_process+0x5d2/0x7800
[ 2192.940381]  ? stack_trace_save+0x8c/0xc0
[ 2192.940837]  ? stack_trace_consume_entry+0x160/0x160
[ 2192.941422]  ? kasan_save_stack+0x32/0x40
[ 2192.941856]  ? kasan_save_stack+0x1b/0x40
[ 2192.942318]  ? create_io_worker+0xe8/0x620
[ 2192.942781]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2192.943241]  ? __cleanup_sighand+0xb0/0xb0
[ 2192.943705]  ? __lockdep_reset_lock+0x180/0x180
[ 2192.944225]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2192.944801]  ? io_wqe_dec_running+0x220/0x220
[ 2192.945296]  create_io_thread+0xb6/0xf0
[ 2192.945722]  ? pidfd_pid+0x90/0x90
[ 2192.946121]  ? io_wqe_dec_running+0x220/0x220
[ 2192.946621]  ? __init_swait_queue_head+0xc6/0x150
[ 2192.947157]  create_io_worker+0x23a/0x620
[ 2192.947615]  io_wqe_enqueue+0x69e/0xbe0
[ 2192.948057]  ? create_worker_cb+0x260/0x260
[ 2192.948533]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2192.949028]  ? io_prep_async_work+0x34e/0x540
[ 2192.949536]  io_queue_async_work+0x26b/0x4f0
[ 2192.950003]  __io_queue_sqe+0x5cc/0x9d0
[ 2192.950452]  ? io_issue_sqe+0x7700/0x7700
[ 2192.950907]  ? io_poll_queue_proc+0x50/0x50
[ 2192.951379]  ? io_prep_rw+0x7f5/0x1050
[ 2192.951799]  io_submit_sqes+0x4461/0x85c0
[ 2192.952275]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.952801]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.953318]  ? lock_downgrade+0x6d0/0x6d0
[ 2192.953765]  ? find_held_lock+0x2c/0x110
[ 2192.954198]  ? io_submit_sqes+0x85c0/0x85c0
[ 2192.954662]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2192.955167]  ? wait_for_completion_io+0x270/0x270
[ 2192.955678]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2192.956172]  ? vfs_write+0x354/0xa70
[ 2192.956572]  ? fput_many+0x2f/0x1a0
[ 2192.956961]  ? ksys_write+0x1a9/0x260
[ 2192.957383]  ? __ia32_sys_read+0xb0/0xb0
[ 2192.957818]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2192.958371]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2192.958919]  do_syscall_64+0x33/0x40
[ 2192.959317]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2192.959851] RIP: 0033:0x7fca01abfb19
[ 2192.960257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2192.962192] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2192.962990] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2192.963738] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2192.964489] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2192.965240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2192.966003] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2192.975229] FAULT_INJECTION: forcing a failure.
[ 2192.975229] name failslab, interval 1, probability 0, space 0, times 0
[ 2192.976749] CPU: 0 PID: 13308 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2192.977476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2192.978347] Call Trace:
[ 2192.978633]  dump_stack+0x107/0x167
[ 2192.979037]  should_fail.cold+0x5/0xa
[ 2192.979465]  ? memcg_alloc_page_obj_cgroups+0x73/0x100
[ 2192.980041]  should_failslab+0x5/0x20
[ 2192.980451]  __kmalloc_node+0x76/0x420
[ 2192.980885]  memcg_alloc_page_obj_cgroups+0x73/0x100
[ 2192.981433]  memcg_slab_post_alloc_hook+0x1f0/0x430
[ 2192.981967]  kmem_cache_alloc_bulk+0x182/0x320
[ 2192.982450]  io_submit_sqes+0x6f76/0x85c0
[ 2192.982900]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2192.983424]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.983951]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2192.984460]  ? lock_downgrade+0x6d0/0x6d0
[ 2192.984898]  ? find_held_lock+0x2c/0x110
[ 2192.985344]  ? io_submit_sqes+0x85c0/0x85c0
[ 2192.985812]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2192.986322]  ? wait_for_completion_io+0x270/0x270
[ 2192.986449] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2192.986839]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2192.988811]  ? vfs_write+0x354/0xa70
[ 2192.989205]  ? fput_many+0x2f/0x1a0
[ 2192.989609]  ? ksys_write+0x1a9/0x260
[ 2192.990015]  ? __ia32_sys_read+0xb0/0xb0
[ 2192.990443]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2192.990995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2192.991540]  do_syscall_64+0x33/0x40
[ 2192.991933]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2192.992491] RIP: 0033:0x7f3e76317b19
[ 2192.992886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2192.994907] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2192.995705] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2192.996455] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2192.997198] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2192.997959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2192.998703] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:41:36 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:36 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)

07:41:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r6}}}], 0x28}}], 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x104, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)

[ 2206.035398] FAULT_INJECTION: forcing a failure.
[ 2206.035398] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.036731] CPU: 0 PID: 13317 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2206.037455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2206.038340] Call Trace:
[ 2206.038628]  dump_stack+0x107/0x167
[ 2206.039022]  should_fail.cold+0x5/0xa
[ 2206.039435]  ? create_object.isra.0+0x3a/0xa20
[ 2206.039915]  should_failslab+0x5/0x20
[ 2206.040326]  kmem_cache_alloc+0x5b/0x310
[ 2206.040771]  create_object.isra.0+0x3a/0xa20
[ 2206.041249]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2206.041804]  kmem_cache_alloc_node+0x169/0x330
[ 2206.042297]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2206.042872]  copy_process+0x5d2/0x7800
[ 2206.043288]  ? stack_trace_save+0x8c/0xc0
[ 2206.043724]  ? stack_trace_consume_entry+0x160/0x160
[ 2206.044270]  ? kasan_save_stack+0x32/0x40
[ 2206.044710]  ? kasan_save_stack+0x1b/0x40
[ 2206.045159]  ? create_io_worker+0xe8/0x620
[ 2206.045611]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2206.046055]  ? __cleanup_sighand+0xb0/0xb0
[ 2206.046505]  ? __lockdep_reset_lock+0x180/0x180
[ 2206.047010]  ? lock_acquire+0x197/0x470
[ 2206.047450]  ? create_object.isra.0+0x3ad/0xa20
[ 2206.047967]  ? lock_release+0x680/0x680
[ 2206.048390]  ? find_held_lock+0x2c/0x110
[ 2206.048841]  ? io_wqe_dec_running+0x220/0x220
[ 2206.049316]  create_io_thread+0xb6/0xf0
[ 2206.049762]  ? pidfd_pid+0x90/0x90
[ 2206.050160]  ? mark_held_locks+0x9e/0xe0
[ 2206.050617]  ? io_wqe_dec_running+0x220/0x220
[ 2206.051115]  ? __init_swait_queue_head+0xc6/0x150
[ 2206.051642]  create_io_worker+0x23a/0x620
[ 2206.052106]  io_wqe_enqueue+0x69e/0xbe0
[ 2206.052547]  ? create_worker_cb+0x260/0x260
[ 2206.053023]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2206.053514]  ? io_prep_async_work+0x34e/0x540
[ 2206.054014]  io_queue_async_work+0x26b/0x4f0
[ 2206.054501]  __io_queue_sqe+0x5cc/0x9d0
[ 2206.054937]  ? io_issue_sqe+0x7700/0x7700
[ 2206.055373]  ? io_poll_queue_proc+0x50/0x50
[ 2206.055851]  ? io_prep_rw+0x7f5/0x1050
[ 2206.056266]  io_submit_sqes+0x4461/0x85c0
[ 2206.056743]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2206.057268]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2206.057820]  ? lock_downgrade+0x6d0/0x6d0
[ 2206.058282]  ? find_held_lock+0x2c/0x110
[ 2206.058741]  ? io_submit_sqes+0x85c0/0x85c0
[ 2206.059221]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2206.059753]  ? wait_for_completion_io+0x270/0x270
[ 2206.060295]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2206.060806]  ? vfs_write+0x354/0xa70
[ 2206.061225]  ? fput_many+0x2f/0x1a0
[ 2206.061619]  ? ksys_write+0x1a9/0x260
[ 2206.062046]  ? __ia32_sys_read+0xb0/0xb0
[ 2206.062473]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2206.063055]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2206.063600]  do_syscall_64+0x33/0x40
[ 2206.064021]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2206.064581] RIP: 0033:0x7fca01abfb19
[ 2206.064993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.067048] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2206.067896] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2206.068683] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2206.069472] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2206.070258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2206.071045] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2206.081990] FAULT_INJECTION: forcing a failure.
[ 2206.081990] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.083248] CPU: 0 PID: 13331 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2206.083997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2206.084877] Call Trace:
[ 2206.085164]  dump_stack+0x107/0x167
[ 2206.085583]  should_fail.cold+0x5/0xa
[ 2206.085988]  ? create_io_worker+0xe8/0x620
[ 2206.086452]  should_failslab+0x5/0x20
[ 2206.086866]  kmem_cache_alloc_node_trace+0x59/0x340
[ 2206.087409]  create_io_worker+0xe8/0x620
[ 2206.087848]  io_wqe_enqueue+0x69e/0xbe0
[ 2206.088275]  ? create_worker_cb+0x260/0x260
[ 2206.088735]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2206.089215]  ? io_prep_async_work+0x34e/0x540
[ 2206.089707]  io_queue_async_work+0x26b/0x4f0
[ 2206.090207]  __io_queue_sqe+0x5cc/0x9d0
[ 2206.090652]  ? io_issue_sqe+0x7700/0x7700
[ 2206.091114]  ? io_poll_queue_proc+0x50/0x50
[ 2206.091599]  ? io_prep_rw+0x7f5/0x1050
[ 2206.092036]  io_submit_sqes+0x4461/0x85c0
[ 2206.092517]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2206.093068]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2206.093614]  ? lock_downgrade+0x6d0/0x6d0
[ 2206.094072]  ? find_held_lock+0x2c/0x110
[ 2206.094528]  ? io_submit_sqes+0x85c0/0x85c0
[ 2206.095016]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2206.095545]  ? wait_for_completion_io+0x270/0x270
[ 2206.096082]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2206.096593]  ? vfs_write+0x354/0xa70
[ 2206.097018]  ? fput_many+0x2f/0x1a0
[ 2206.097418]  ? ksys_write+0x1a9/0x260
[ 2206.097857]  ? __ia32_sys_read+0xb0/0xb0
[ 2206.098302]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2206.098877]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2206.099449]  do_syscall_64+0x33/0x40
[ 2206.099870]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2206.100410] RIP: 0033:0x7f3e76317b19
[ 2206.100830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.102811] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2206.103667] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2206.104465] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2206.105260] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2206.106043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2206.106870] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:41:36 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:36 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:36 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:41:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:36 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0})
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r5}}}], 0x28}}], 0x2, 0x0)

07:41:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2206.215175] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:41:50 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:50 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be3594916bd9afd1822d57f1d7b8f97ac7f1727651e527d4cd46d96f7422f4cac735f97f18efc83bcf28218c7def03a5f4a5bb8379e9fccfc9e75f78002f69889d768e1c7360828ae83978bbb66be7caaca876fa7514a368327ceb6be43"}}, 0x87)

07:41:50 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)

07:41:50 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0})
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r5}}}], 0x28}}], 0x2, 0x0)

07:41:50 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:50 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)

07:41:50 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2220.321051] FAULT_INJECTION: forcing a failure.
[ 2220.321051] name failslab, interval 1, probability 0, space 0, times 0
[ 2220.322357] CPU: 0 PID: 13361 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2220.323084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2220.323954] Call Trace:
[ 2220.324268]  dump_stack+0x107/0x167
[ 2220.324660]  should_fail.cold+0x5/0xa
[ 2220.325068]  ? __io_queue_sqe+0x666/0x9d0
[ 2220.325507]  should_failslab+0x5/0x20
[ 2220.325927]  kmem_cache_alloc_trace+0x55/0x320
[ 2220.326414]  __io_queue_sqe+0x666/0x9d0
[ 2220.326843]  ? io_issue_sqe+0x7700/0x7700
[ 2220.327285]  ? io_prep_rw+0x7f5/0x1050
[ 2220.327703]  io_submit_sqes+0x4461/0x85c0
[ 2220.328165]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.328688]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.329201]  ? lock_downgrade+0x6d0/0x6d0
[ 2220.329640]  ? find_held_lock+0x2c/0x110
[ 2220.330117]  ? io_submit_sqes+0x85c0/0x85c0
[ 2220.330602]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2220.331138]  ? wait_for_completion_io+0x270/0x270
[ 2220.331657]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2220.332158]  ? vfs_write+0x354/0xa70
[ 2220.332560]  ? fput_many+0x2f/0x1a0
[ 2220.332946]  ? ksys_write+0x1a9/0x260
[ 2220.333355]  ? __ia32_sys_read+0xb0/0xb0
[ 2220.333793]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2220.334361]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2220.334920]  do_syscall_64+0x33/0x40
[ 2220.335332]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2220.335879] RIP: 0033:0x7f3e76317b19
[ 2220.336275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2220.338230] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2220.339036] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2220.339791] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2220.340554] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2220.341306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2220.342076] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2220.386473] FAULT_INJECTION: forcing a failure.
[ 2220.386473] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2220.390065] CPU: 0 PID: 13370 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2220.391479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2220.393170] Call Trace:
[ 2220.393724]  dump_stack+0x107/0x167
[ 2220.394472]  should_fail.cold+0x5/0xa
[ 2220.395265]  __alloc_pages_nodemask+0x182/0x600
[ 2220.396215]  ? lock_downgrade+0x6d0/0x6d0
[ 2220.397058]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2220.398284]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2220.399337]  ? kmem_cache_alloc_node+0x2bc/0x330
[ 2220.400301]  copy_process+0x618/0x7800
[ 2220.401096]  ? stack_trace_save+0x8c/0xc0
[ 2220.401954]  ? stack_trace_consume_entry+0x160/0x160
[ 2220.402990]  ? kasan_save_stack+0x32/0x40
[ 2220.403825]  ? kasan_save_stack+0x1b/0x40
[ 2220.404672]  ? create_io_worker+0xe8/0x620
[ 2220.405528]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2220.406403]  ? __cleanup_sighand+0xb0/0xb0
[ 2220.407257]  ? __lockdep_reset_lock+0x180/0x180
[ 2220.408198]  ? lock_acquire+0x197/0x470
[ 2220.409009]  ? create_object.isra.0+0x3ad/0xa20
[ 2220.409980]  ? lock_release+0x680/0x680
[ 2220.410777]  ? find_held_lock+0x2c/0x110
[ 2220.411608]  ? io_wqe_dec_running+0x220/0x220
[ 2220.412517]  create_io_thread+0xb6/0xf0
[ 2220.413317]  ? pidfd_pid+0x90/0x90
[ 2220.414051]  ? mark_held_locks+0x9e/0xe0
[ 2220.414872]  ? io_wqe_dec_running+0x220/0x220
[ 2220.415789]  ? __init_swait_queue_head+0xc6/0x150
[ 2220.416773]  create_io_worker+0x23a/0x620
[ 2220.417617]  io_wqe_enqueue+0x69e/0xbe0
[ 2220.418453]  ? create_worker_cb+0x260/0x260
[ 2220.419330]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2220.420254]  ? io_prep_async_work+0x34e/0x540
[ 2220.421170]  io_queue_async_work+0x26b/0x4f0
[ 2220.422077]  __io_queue_sqe+0x5cc/0x9d0
[ 2220.422889]  ? io_issue_sqe+0x7700/0x7700
[ 2220.423729]  ? io_poll_queue_proc+0x50/0x50
[ 2220.424609]  ? io_prep_rw+0x7f5/0x1050
[ 2220.425405]  io_submit_sqes+0x4461/0x85c0
[ 2220.426285]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.427294]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.428274]  ? lock_downgrade+0x6d0/0x6d0
[ 2220.429109]  ? find_held_lock+0x2c/0x110
[ 2220.429955]  ? io_submit_sqes+0x85c0/0x85c0
[ 2220.430830]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2220.431802]  ? wait_for_completion_io+0x270/0x270
[ 2220.432772]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2220.433710]  ? vfs_write+0x354/0xa70
[ 2220.434461]  ? fput_many+0x2f/0x1a0
[ 2220.435194]  ? ksys_write+0x1a9/0x260
[ 2220.435972]  ? __ia32_sys_read+0xb0/0xb0
[ 2220.436796]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2220.437862]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2220.438909]  do_syscall_64+0x33/0x40
[ 2220.439660]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2220.440692] RIP: 0033:0x7fca01abfb19
[ 2220.441445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2220.445163] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2220.446702] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2220.448138] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2220.449576] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2220.451029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2220.452468] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:41:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:50 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)

[ 2220.480904] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:41:50 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:50 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:41:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:41:51 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2220.600918] FAULT_INJECTION: forcing a failure.
[ 2220.600918] name failslab, interval 1, probability 0, space 0, times 0
[ 2220.603445] CPU: 1 PID: 13381 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2220.604846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2220.606583] Call Trace:
[ 2220.607139]  dump_stack+0x107/0x167
[ 2220.607891]  should_fail.cold+0x5/0xa
[ 2220.608682]  ? copy_process+0x5d2/0x7800
[ 2220.609522]  should_failslab+0x5/0x20
[ 2220.610318]  kmem_cache_alloc_node+0x55/0x330
[ 2220.611231]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2220.612299]  copy_process+0x5d2/0x7800
[ 2220.613094]  ? stack_trace_save+0x8c/0xc0
[ 2220.613945]  ? stack_trace_consume_entry+0x160/0x160
[ 2220.614990]  ? kasan_save_stack+0x32/0x40
[ 2220.615841]  ? kasan_save_stack+0x1b/0x40
[ 2220.616680]  ? create_io_worker+0xe8/0x620
[ 2220.617535]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2220.618397]  ? __cleanup_sighand+0xb0/0xb0
[ 2220.619259]  ? __lockdep_reset_lock+0x180/0x180
[ 2220.620214]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
07:41:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2220.621273]  ? io_wqe_dec_running+0x220/0x220
[ 2220.622352]  create_io_thread+0xb6/0xf0
[ 2220.623153]  ? pidfd_pid+0x90/0x90
[ 2220.623880]  ? io_wqe_dec_running+0x220/0x220
[ 2220.624800]  ? __init_swait_queue_head+0xc6/0x150
[ 2220.625793]  create_io_worker+0x23a/0x620
[ 2220.626633]  io_wqe_enqueue+0x69e/0xbe0
[ 2220.627438]  ? create_worker_cb+0x260/0x260
[ 2220.628307]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2220.629215]  ? io_prep_async_work+0x34e/0x540
[ 2220.630139]  io_queue_async_work+0x26b/0x4f0
[ 2220.631037]  __io_queue_sqe+0x5cc/0x9d0
[ 2220.631864]  ? io_issue_sqe+0x7700/0x7700
[ 2220.632700]  ? io_poll_queue_proc+0x50/0x50
[ 2220.633577]  ? io_prep_rw+0x7f5/0x1050
[ 2220.634374]  io_submit_sqes+0x4461/0x85c0
[ 2220.635244]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.636246]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2220.637218]  ? lock_downgrade+0x6d0/0x6d0
[ 2220.638076]  ? find_held_lock+0x2c/0x110
[ 2220.638903]  ? io_submit_sqes+0x85c0/0x85c0
[ 2220.639779]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2220.640753]  ? wait_for_completion_io+0x270/0x270
[ 2220.641736]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2220.642667]  ? vfs_write+0x354/0xa70
[ 2220.643422]  ? fput_many+0x2f/0x1a0
[ 2220.644156]  ? ksys_write+0x1a9/0x260
[ 2220.644923]  ? __ia32_sys_read+0xb0/0xb0
[ 2220.645769]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2220.646826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2220.647872]  do_syscall_64+0x33/0x40
[ 2220.648628]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2220.649674] RIP: 0033:0x7f3e76317b19
[ 2220.650437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2220.654146] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2220.655681] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2220.657115] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2220.658566] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2220.660002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2220.661436] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2220.691173] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:41:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:41:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:41:51 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:41:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:41:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be3594916bd9afd1822d57f1d7b8f97ac7f1727651e527d4cd46d96f742"}}, 0x47)

07:41:51 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2220.854078] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:42:06 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)

07:42:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)

07:42:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:42:06 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:06 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

07:42:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2235.998229] FAULT_INJECTION: forcing a failure.
[ 2235.998229] name failslab, interval 1, probability 0, space 0, times 0
[ 2236.000766] CPU: 1 PID: 13429 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2236.002175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2236.003862] Call Trace:
[ 2236.004407]  dump_stack+0x107/0x167
[ 2236.005159]  should_fail.cold+0x5/0xa
[ 2236.005987]  ? __delayacct_tsk_init+0x1b/0x80
[ 2236.006909]  should_failslab+0x5/0x20
[ 2236.007688]  kmem_cache_alloc+0x5b/0x310
[ 2236.008529]  __delayacct_tsk_init+0x1b/0x80
[ 2236.009417]  copy_process+0x3319/0x7800
[ 2236.010243]  ? stack_trace_save+0x8c/0xc0
[ 2236.011084]  ? stack_trace_consume_entry+0x160/0x160
[ 2236.012131]  ? kasan_save_stack+0x1b/0x40
[ 2236.012982]  ? __cleanup_sighand+0xb0/0xb0
[ 2236.013840]  ? __lockdep_reset_lock+0x180/0x180
[ 2236.014784]  ? lock_acquire+0x197/0x470
[ 2236.015596]  ? create_object.isra.0+0x3ad/0xa20
[ 2236.015877] FAULT_INJECTION: forcing a failure.
[ 2236.015877] name failslab, interval 1, probability 0, space 0, times 0
[ 2236.016511]  ? lock_release+0x680/0x680
[ 2236.016530]  ? find_held_lock+0x2c/0x110
[ 2236.016559]  ? io_wqe_dec_running+0x220/0x220
[ 2236.016579]  create_io_thread+0xb6/0xf0
[ 2236.016612]  ? pidfd_pid+0x90/0x90
[ 2236.022846]  ? mark_held_locks+0x9e/0xe0
[ 2236.023664]  ? io_wqe_dec_running+0x220/0x220
[ 2236.024590]  ? __init_swait_queue_head+0xc6/0x150
[ 2236.025568]  create_io_worker+0x23a/0x620
[ 2236.026426]  io_wqe_enqueue+0x69e/0xbe0
[ 2236.027246]  ? create_worker_cb+0x260/0x260
[ 2236.028126]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2236.029049]  ? io_prep_async_work+0x34e/0x540
[ 2236.029988]  io_queue_async_work+0x26b/0x4f0
[ 2236.030901]  __io_queue_sqe+0x5cc/0x9d0
[ 2236.031715]  ? io_issue_sqe+0x7700/0x7700
[ 2236.032563]  ? io_poll_queue_proc+0x50/0x50
[ 2236.033452]  ? io_prep_rw+0x7f5/0x1050
[ 2236.034264]  io_submit_sqes+0x4461/0x85c0
[ 2236.035139]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2236.036152]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2236.037134]  ? lock_downgrade+0x6d0/0x6d0
[ 2236.037987]  ? find_held_lock+0x2c/0x110
[ 2236.038818]  ? io_submit_sqes+0x85c0/0x85c0
[ 2236.039700]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2236.040681]  ? wait_for_completion_io+0x270/0x270
[ 2236.041662]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2236.042615]  ? vfs_write+0x354/0xa70
[ 2236.043384]  ? fput_many+0x2f/0x1a0
[ 2236.044126]  ? ksys_write+0x1a9/0x260
[ 2236.044914]  ? __ia32_sys_read+0xb0/0xb0
[ 2236.045743]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2236.046828]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2236.047880]  do_syscall_64+0x33/0x40
[ 2236.048636]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2236.049674] RIP: 0033:0x7fca01abfb19
[ 2236.050449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2236.054188] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2236.055754] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2236.057209] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2236.058680] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2236.060128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2236.061577] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2236.063065] CPU: 0 PID: 13433 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2236.064482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2236.066167] Call Trace:
[ 2236.066716]  dump_stack+0x107/0x167
[ 2236.067459]  should_fail.cold+0x5/0xa
[ 2236.068235]  ? create_object.isra.0+0x3a/0xa20
[ 2236.069157]  should_failslab+0x5/0x20
[ 2236.069938]  kmem_cache_alloc+0x5b/0x310
[ 2236.070782]  create_object.isra.0+0x3a/0xa20
[ 2236.071678]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2236.072708]  kmem_cache_alloc_node+0x169/0x330
[ 2236.073629]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2236.074721]  copy_process+0x5d2/0x7800
[ 2236.075512]  ? stack_trace_save+0x8c/0xc0
[ 2236.076345]  ? stack_trace_consume_entry+0x160/0x160
[ 2236.077390]  ? kasan_save_stack+0x32/0x40
[ 2236.078231]  ? kasan_save_stack+0x1b/0x40
[ 2236.079082]  ? create_io_worker+0xe8/0x620
[ 2236.079944]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2236.080787]  ? __cleanup_sighand+0xb0/0xb0
[ 2236.081646]  ? __lockdep_reset_lock+0x180/0x180
[ 2236.082590]  ? lock_acquire+0x197/0x470
[ 2236.083388]  ? create_object.isra.0+0x3ad/0xa20
[ 2236.084316]  ? lock_release+0x680/0x680
[ 2236.085116]  ? find_held_lock+0x2c/0x110
[ 2236.085952]  ? io_wqe_dec_running+0x220/0x220
[ 2236.086848]  create_io_thread+0xb6/0xf0
[ 2236.087652]  ? pidfd_pid+0x90/0x90
[ 2236.088358]  ? mark_held_locks+0x9e/0xe0
[ 2236.089185]  ? io_wqe_dec_running+0x220/0x220
[ 2236.090445]  ? __init_swait_queue_head+0xc6/0x150
[ 2236.091604]  create_io_worker+0x23a/0x620
[ 2236.092612]  io_wqe_enqueue+0x69e/0xbe0
[ 2236.093547]  ? create_worker_cb+0x260/0x260
[ 2236.094622]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2236.095706]  ? io_prep_async_work+0x34e/0x540
[ 2236.096797]  io_queue_async_work+0x26b/0x4f0
[ 2236.097856]  __io_queue_sqe+0x5cc/0x9d0
[ 2236.098827]  ? io_issue_sqe+0x7700/0x7700
[ 2236.099829]  ? io_poll_queue_proc+0x50/0x50
[ 2236.100871]  ? io_prep_rw+0x7f5/0x1050
[ 2236.101820]  io_submit_sqes+0x4461/0x85c0
[ 2236.102861]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2236.104057]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2236.105212]  ? lock_downgrade+0x6d0/0x6d0
[ 2236.106232]  ? find_held_lock+0x2c/0x110
[ 2236.107105]  ? io_submit_sqes+0x85c0/0x85c0
[ 2236.107977]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2236.108957]  ? wait_for_completion_io+0x270/0x270
[ 2236.109938]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2236.110867]  ? vfs_write+0x354/0xa70
[ 2236.111624]  ? fput_many+0x2f/0x1a0
[ 2236.112357]  ? ksys_write+0x1a9/0x260
[ 2236.113129]  ? __ia32_sys_read+0xb0/0xb0
[ 2236.113950]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2236.115008]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2236.116048]  do_syscall_64+0x33/0x40
[ 2236.116804]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2236.117845] RIP: 0033:0x7f3e76317b19
[ 2236.118618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2236.122366] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2236.123898] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2236.125340] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2236.126792] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2236.128241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2236.129680] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:42:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2236.211769] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:42:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)

07:42:19 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:42:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)

07:42:19 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:19 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25}, 0x7)

[ 2249.081861] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2249.100988] FAULT_INJECTION: forcing a failure.
[ 2249.100988] name failslab, interval 1, probability 0, space 0, times 0
[ 2249.103571] CPU: 1 PID: 13451 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2249.104975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2249.106648] Call Trace:
[ 2249.107188]  dump_stack+0x107/0x167
[ 2249.107928]  should_fail.cold+0x5/0xa
[ 2249.108721]  ? create_object.isra.0+0x3a/0xa20
[ 2249.109677]  should_failslab+0x5/0x20
[ 2249.110462]  kmem_cache_alloc+0x5b/0x310
[ 2249.111305]  create_object.isra.0+0x3a/0xa20
[ 2249.112188]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2249.113213]  kmem_cache_alloc+0x159/0x310
[ 2249.114063]  __delayacct_tsk_init+0x1b/0x80
[ 2249.114932]  copy_process+0x3319/0x7800
[ 2249.115738]  ? stack_trace_save+0x8c/0xc0
[ 2249.116584]  ? stack_trace_consume_entry+0x160/0x160
[ 2249.117621]  ? kasan_save_stack+0x1b/0x40
[ 2249.118489]  ? __cleanup_sighand+0xb0/0xb0
[ 2249.119340]  ? __lockdep_reset_lock+0x180/0x180
[ 2249.120300]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2249.121353]  ? io_wqe_dec_running+0x220/0x220
[ 2249.122266]  create_io_thread+0xb6/0xf0
[ 2249.123063]  ? pidfd_pid+0x90/0x90
[ 2249.123788]  ? io_wqe_dec_running+0x220/0x220
[ 2249.124707]  ? __init_swait_queue_head+0xc6/0x150
[ 2249.125684]  create_io_worker+0x23a/0x620
[ 2249.126532]  io_wqe_enqueue+0x69e/0xbe0
[ 2249.126948] FAULT_INJECTION: forcing a failure.
[ 2249.126948] name failslab, interval 1, probability 0, space 0, times 0
[ 2249.127340]  ? create_worker_cb+0x260/0x260
[ 2249.127363]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2249.127392]  ? io_prep_async_work+0x34e/0x540
[ 2249.132287]  io_queue_async_work+0x26b/0x4f0
[ 2249.133191]  __io_queue_sqe+0x5cc/0x9d0
[ 2249.134004]  ? io_issue_sqe+0x7700/0x7700
[ 2249.134849]  ? io_poll_queue_proc+0x50/0x50
[ 2249.135721]  ? io_prep_rw+0x7f5/0x1050
[ 2249.136513]  io_submit_sqes+0x4461/0x85c0
[ 2249.137381]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.138403]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.139380]  ? lock_downgrade+0x6d0/0x6d0
[ 2249.140219]  ? find_held_lock+0x2c/0x110
[ 2249.141043]  ? io_submit_sqes+0x85c0/0x85c0
[ 2249.141942]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2249.142931]  ? wait_for_completion_io+0x270/0x270
[ 2249.143919]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2249.144850]  ? vfs_write+0x354/0xa70
[ 2249.145604]  ? fput_many+0x2f/0x1a0
[ 2249.146345]  ? ksys_write+0x1a9/0x260
[ 2249.147118]  ? __ia32_sys_read+0xb0/0xb0
[ 2249.147942]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2249.148996]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2249.150055]  do_syscall_64+0x33/0x40
[ 2249.150815]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2249.151847] RIP: 0033:0x7fca01abfb19
[ 2249.152599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2249.156301] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2249.157833] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2249.159273] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2249.160708] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2249.162155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2249.163589] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2249.165060] CPU: 0 PID: 13462 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2249.166498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2249.168168] Call Trace:
[ 2249.168719]  dump_stack+0x107/0x167
[ 2249.169463]  should_fail.cold+0x5/0xa
[ 2249.170247]  ? create_object.isra.0+0x3a/0xa20
[ 2249.171177]  should_failslab+0x5/0x20
[ 2249.171949]  kmem_cache_alloc+0x5b/0x310
[ 2249.172777]  create_object.isra.0+0x3a/0xa20
[ 2249.173665]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2249.174710]  kmem_cache_alloc_node+0x169/0x330
[ 2249.175649]  copy_process+0x5d2/0x7800
[ 2249.176443]  ? stack_trace_save+0x8c/0xc0
[ 2249.177281]  ? stack_trace_consume_entry+0x160/0x160
[ 2249.178339]  ? kasan_save_stack+0x32/0x40
[ 2249.179176]  ? kasan_save_stack+0x1b/0x40
[ 2249.180015]  ? create_io_worker+0xe8/0x620
[ 2249.180866]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2249.181709]  ? __cleanup_sighand+0xb0/0xb0
[ 2249.182574]  ? __lockdep_reset_lock+0x180/0x180
[ 2249.183514]  ? lock_acquire+0x197/0x470
[ 2249.184315]  ? create_object.isra.0+0x3ad/0xa20
[ 2249.185257]  ? lock_release+0x680/0x680
[ 2249.186077]  ? find_held_lock+0x2c/0x110
[ 2249.186908]  ? io_wqe_dec_running+0x220/0x220
[ 2249.187813]  create_io_thread+0xb6/0xf0
[ 2249.188613]  ? pidfd_pid+0x90/0x90
[ 2249.189331]  ? mark_held_locks+0x9e/0xe0
[ 2249.190163]  ? io_wqe_dec_running+0x220/0x220
[ 2249.191084]  ? __init_swait_queue_head+0xc6/0x150
[ 2249.192060]  create_io_worker+0x23a/0x620
[ 2249.192900]  io_wqe_enqueue+0x69e/0xbe0
[ 2249.193708]  ? create_worker_cb+0x260/0x260
[ 2249.194599]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2249.195512]  ? io_prep_async_work+0x34e/0x540
[ 2249.196424]  io_queue_async_work+0x26b/0x4f0
[ 2249.197320]  __io_queue_sqe+0x5cc/0x9d0
[ 2249.198136]  ? io_issue_sqe+0x7700/0x7700
[ 2249.198971]  ? io_poll_queue_proc+0x50/0x50
[ 2249.199845]  ? io_prep_rw+0x7f5/0x1050
[ 2249.200644]  io_submit_sqes+0x4461/0x85c0
[ 2249.201523]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.202549]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.203529]  ? lock_downgrade+0x6d0/0x6d0
[ 2249.204363]  ? find_held_lock+0x2c/0x110
[ 2249.205190]  ? io_submit_sqes+0x85c0/0x85c0
[ 2249.206086]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2249.207063]  ? wait_for_completion_io+0x270/0x270
[ 2249.208040]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2249.208974]  ? vfs_write+0x354/0xa70
[ 2249.209733]  ? fput_many+0x2f/0x1a0
[ 2249.210488]  ? ksys_write+0x1a9/0x260
[ 2249.211258]  ? __ia32_sys_read+0xb0/0xb0
[ 2249.212084]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2249.213141]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2249.214199]  do_syscall_64+0x33/0x40
[ 2249.214960]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2249.215994] RIP: 0033:0x7f3e76317b19
[ 2249.216757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2249.220458] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2249.221991] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2249.223438] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2249.224871] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2249.226312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2249.227747] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:42:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:42:19 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:19 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:42:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)

07:42:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)

07:42:19 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:42:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2249.480046] FAULT_INJECTION: forcing a failure.
[ 2249.480046] name failslab, interval 1, probability 0, space 0, times 0
[ 2249.483037] CPU: 0 PID: 13486 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2249.484459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2249.486174] Call Trace:
[ 2249.486724]  dump_stack+0x107/0x167
[ 2249.487467]  should_fail.cold+0x5/0xa
[ 2249.488241]  ? __delayacct_tsk_init+0x1b/0x80
[ 2249.489153]  should_failslab+0x5/0x20
[ 2249.489925]  kmem_cache_alloc+0x5b/0x310
[ 2249.490762]  __delayacct_tsk_init+0x1b/0x80
[ 2249.491637]  copy_process+0x3319/0x7800
[ 2249.492452]  ? stack_trace_save+0x8c/0xc0
[ 2249.493292]  ? stack_trace_consume_entry+0x160/0x160
[ 2249.494341]  ? kasan_save_stack+0x1b/0x40
[ 2249.495193]  ? __cleanup_sighand+0xb0/0xb0
[ 2249.496051]  ? __lockdep_reset_lock+0x180/0x180
[ 2249.496989]  ? lock_acquire+0x197/0x470
[ 2249.497792]  ? create_object.isra.0+0x3ad/0xa20
[ 2249.498758]  ? lock_release+0x680/0x680
[ 2249.499563]  ? find_held_lock+0x2c/0x110
[ 2249.500396]  ? io_wqe_dec_running+0x220/0x220
[ 2249.501292]  create_io_thread+0xb6/0xf0
[ 2249.502096]  ? pidfd_pid+0x90/0x90
[ 2249.502810]  ? mark_held_locks+0x9e/0xe0
[ 2249.503625]  ? io_wqe_dec_running+0x220/0x220
[ 2249.504535]  ? __init_swait_queue_head+0xc6/0x150
[ 2249.505501]  create_io_worker+0x23a/0x620
[ 2249.506342]  io_wqe_enqueue+0x69e/0xbe0
[ 2249.507143]  ? create_worker_cb+0x260/0x260
[ 2249.508015]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2249.508915]  ? io_prep_async_work+0x34e/0x540
[ 2249.509822]  io_queue_async_work+0x26b/0x4f0
[ 2249.510728]  __io_queue_sqe+0x5cc/0x9d0
[ 2249.511534]  ? io_issue_sqe+0x7700/0x7700
[ 2249.512363]  ? io_poll_queue_proc+0x50/0x50
[ 2249.513227]  ? io_prep_rw+0x7f5/0x1050
[ 2249.514016]  io_submit_sqes+0x4461/0x85c0
[ 2249.514886]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.515876]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.516841]  ? lock_downgrade+0x6d0/0x6d0
[ 2249.517666]  ? find_held_lock+0x2c/0x110
[ 2249.518489]  ? io_submit_sqes+0x85c0/0x85c0
[ 2249.519353]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2249.520314]  ? wait_for_completion_io+0x270/0x270
[ 2249.521272]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2249.522207]  ? vfs_write+0x354/0xa70
[ 2249.522957]  ? fput_many+0x2f/0x1a0
[ 2249.523681]  ? ksys_write+0x1a9/0x260
[ 2249.524434]  ? __ia32_sys_read+0xb0/0xb0
[ 2249.525244]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2249.526292]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2249.527324]  do_syscall_64+0x33/0x40
[ 2249.528067]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2249.529089] RIP: 0033:0x7f3e76317b19
[ 2249.529831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2249.533542] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2249.535066] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2249.536477] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2249.537884] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2249.539301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2249.540714] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
07:42:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2249.561466] FAULT_INJECTION: forcing a failure.
[ 2249.561466] name failslab, interval 1, probability 0, space 0, times 0
[ 2249.564411] CPU: 1 PID: 13491 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2249.565832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2249.567542] Call Trace:
[ 2249.568098]  dump_stack+0x107/0x167
[ 2249.568843]  should_fail.cold+0x5/0xa
[ 2249.569630]  ? alloc_pid+0xd7/0xd30
[ 2249.570384]  should_failslab+0x5/0x20
[ 2249.571171]  kmem_cache_alloc+0x5b/0x310
[ 2249.572008]  alloc_pid+0xd7/0xd30
[ 2249.572744]  copy_process+0x3a8e/0x7800
[ 2249.573559]  ? stack_trace_save+0x8c/0xc0
[ 2249.574420]  ? stack_trace_consume_entry+0x160/0x160
[ 2249.575482]  ? __cleanup_sighand+0xb0/0xb0
[ 2249.576353]  ? __lockdep_reset_lock+0x180/0x180
[ 2249.577292]  ? lock_acquire+0x197/0x470
[ 2249.578126]  ? create_object.isra.0+0x3ad/0xa20
[ 2249.579074]  ? lock_release+0x680/0x680
[ 2249.579875]  ? find_held_lock+0x2c/0x110
[ 2249.580708]  ? io_wqe_dec_running+0x220/0x220
[ 2249.581618]  create_io_thread+0xb6/0xf0
[ 2249.582427]  ? pidfd_pid+0x90/0x90
[ 2249.583148]  ? mark_held_locks+0x9e/0xe0
[ 2249.583974]  ? io_wqe_dec_running+0x220/0x220
[ 2249.584899]  ? __init_swait_queue_head+0xc6/0x150
[ 2249.585878]  create_io_worker+0x23a/0x620
[ 2249.586737]  io_wqe_enqueue+0x69e/0xbe0
[ 2249.587555]  ? create_worker_cb+0x260/0x260
[ 2249.588436]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2249.589353]  ? io_prep_async_work+0x34e/0x540
[ 2249.590284]  io_queue_async_work+0x26b/0x4f0
[ 2249.591186]  __io_queue_sqe+0x5cc/0x9d0
[ 2249.592001]  ? io_issue_sqe+0x7700/0x7700
[ 2249.592846]  ? io_poll_queue_proc+0x50/0x50
[ 2249.593727]  ? io_prep_rw+0x7f5/0x1050
[ 2249.594537]  io_submit_sqes+0x4461/0x85c0
[ 2249.595418]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.596428]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2249.597423]  ? lock_downgrade+0x6d0/0x6d0
[ 2249.598277]  ? find_held_lock+0x2c/0x110
[ 2249.599108]  ? io_submit_sqes+0x85c0/0x85c0
[ 2249.599989]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2249.600971]  ? wait_for_completion_io+0x270/0x270
[ 2249.601951]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2249.602899]  ? vfs_write+0x354/0xa70
[ 2249.603659]  ? fput_many+0x2f/0x1a0
[ 2249.604421]  ? ksys_write+0x1a9/0x260
[ 2249.605197]  ? __ia32_sys_read+0xb0/0xb0
[ 2249.606017]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2249.607112]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2249.608172]  do_syscall_64+0x33/0x40
[ 2249.608930]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2249.609979] RIP: 0033:0x7fca01abfb19
[ 2249.610753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2249.614510] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2249.616047] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2249.617500] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2249.618957] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2249.620418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2249.621857] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:42:20 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

[ 2249.641649] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:42:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)

07:42:33 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:33 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240), 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:42:33 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:33 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:33 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:33 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be3594916bd9afd1822d57f1d7b"}}, 0x37)

07:42:33 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)

[ 2262.903098] FAULT_INJECTION: forcing a failure.
[ 2262.903098] name failslab, interval 1, probability 0, space 0, times 0
[ 2262.905870] CPU: 0 PID: 13514 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2262.907296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2262.908986] Call Trace:
[ 2262.909535]  dump_stack+0x107/0x167
[ 2262.910293]  should_fail.cold+0x5/0xa
[ 2262.911078]  ? create_object.isra.0+0x3a/0xa20
[ 2262.912009]  should_failslab+0x5/0x20
[ 2262.912785]  kmem_cache_alloc+0x5b/0x310
[ 2262.913618]  create_object.isra.0+0x3a/0xa20
[ 2262.914516]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2262.915547]  kmem_cache_alloc+0x159/0x310
[ 2262.916397]  alloc_pid+0xd7/0xd30
[ 2262.917117]  copy_process+0x3a8e/0x7800
[ 2262.917927]  ? stack_trace_save+0x8c/0xc0
[ 2262.918781]  ? stack_trace_consume_entry+0x160/0x160
[ 2262.919837]  ? __cleanup_sighand+0xb0/0xb0
[ 2262.920689]  ? __lockdep_reset_lock+0x180/0x180
[ 2262.921627]  ? lock_acquire+0x197/0x470
[ 2262.922435]  ? create_object.isra.0+0x3ad/0xa20
07:42:33 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2262.923379]  ? lock_release+0x680/0x680
[ 2262.924305]  ? find_held_lock+0x2c/0x110
[ 2262.925140]  ? io_wqe_dec_running+0x220/0x220
[ 2262.926048]  create_io_thread+0xb6/0xf0
[ 2262.926867]  ? pidfd_pid+0x90/0x90
[ 2262.927595]  ? mark_held_locks+0x9e/0xe0
[ 2262.928422]  ? io_wqe_dec_running+0x220/0x220
[ 2262.929346]  ? __init_swait_queue_head+0xc6/0x150
[ 2262.930328]  create_io_worker+0x23a/0x620
[ 2262.931177]  io_wqe_enqueue+0x69e/0xbe0
[ 2262.931981]  ? create_worker_cb+0x260/0x260
[ 2262.932856]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2262.933777]  ? io_prep_async_work+0x34e/0x540
[ 2262.934713]  io_queue_async_work+0x26b/0x4f0
[ 2262.935618]  __io_queue_sqe+0x5cc/0x9d0
[ 2262.936435]  ? io_issue_sqe+0x7700/0x7700
[ 2262.937283]  ? io_poll_queue_proc+0x50/0x50
[ 2262.938172]  ? io_prep_rw+0x7f5/0x1050
[ 2262.938985]  io_submit_sqes+0x4461/0x85c0
[ 2262.939867]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2262.940887]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2262.941877]  ? lock_downgrade+0x6d0/0x6d0
[ 2262.942720]  ? find_held_lock+0x2c/0x110
[ 2262.943552]  ? io_submit_sqes+0x85c0/0x85c0
[ 2262.944429]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2262.945409]  ? wait_for_completion_io+0x270/0x270
[ 2262.946406]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2262.947349]  ? vfs_write+0x354/0xa70
[ 2262.948108]  ? fput_many+0x2f/0x1a0
[ 2262.948845]  ? ksys_write+0x1a9/0x260
[ 2262.949616]  ? __ia32_sys_read+0xb0/0xb0
[ 2262.950453]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2262.951512]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2262.952567]  do_syscall_64+0x33/0x40
[ 2262.953322]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2262.954368] RIP: 0033:0x7fca01abfb19
[ 2262.955125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2262.958868] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2262.960420] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2262.961866] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2262.963325] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2262.964774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2262.966236] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:42:33 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2262.992352] FAULT_INJECTION: forcing a failure.
[ 2262.992352] name failslab, interval 1, probability 0, space 0, times 0
[ 2262.995147] CPU: 1 PID: 13526 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2262.996533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2262.998191] Call Trace:
[ 2262.998742]  dump_stack+0x107/0x167
[ 2262.999476]  should_fail.cold+0x5/0xa
[ 2263.000238]  ? create_object.isra.0+0x3a/0xa20
[ 2263.001153]  should_failslab+0x5/0x20
[ 2263.001911]  kmem_cache_alloc+0x5b/0x310
[ 2263.002750]  create_object.isra.0+0x3a/0xa20
[ 2263.003634]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2263.004656]  kmem_cache_alloc+0x159/0x310
[ 2263.005498]  __delayacct_tsk_init+0x1b/0x80
[ 2263.006377]  copy_process+0x3319/0x7800
[ 2263.007182]  ? stack_trace_save+0x8c/0xc0
[ 2263.008018]  ? stack_trace_consume_entry+0x160/0x160
[ 2263.009061]  ? kasan_save_stack+0x1b/0x40
[ 2263.009907]  ? __cleanup_sighand+0xb0/0xb0
[ 2263.010780]  ? __lockdep_reset_lock+0x180/0x180
[ 2263.011721]  ? lock_acquire+0x197/0x470
[ 2263.012518]  ? create_object.isra.0+0x3ad/0xa20
[ 2263.013458]  ? lock_release+0x680/0x680
[ 2263.014281]  ? find_held_lock+0x2c/0x110
[ 2263.015110]  ? io_wqe_dec_running+0x220/0x220
[ 2263.016010]  create_io_thread+0xb6/0xf0
[ 2263.016811]  ? pidfd_pid+0x90/0x90
[ 2263.017527]  ? mark_held_locks+0x9e/0xe0
[ 2263.018366]  ? io_wqe_dec_running+0x220/0x220
[ 2263.019284]  ? __init_swait_queue_head+0xc6/0x150
[ 2263.020252]  create_io_worker+0x23a/0x620
[ 2263.021094]  io_wqe_enqueue+0x69e/0xbe0
[ 2263.021901]  ? create_worker_cb+0x260/0x260
[ 2263.022792]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2263.023697]  ? io_prep_async_work+0x34e/0x540
[ 2263.024601]  io_queue_async_work+0x26b/0x4f0
[ 2263.025495]  __io_queue_sqe+0x5cc/0x9d0
[ 2263.026309]  ? io_issue_sqe+0x7700/0x7700
[ 2263.027146]  ? io_poll_queue_proc+0x50/0x50
[ 2263.028020]  ? io_prep_rw+0x7f5/0x1050
[ 2263.028814]  io_submit_sqes+0x4461/0x85c0
[ 2263.029682]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2263.030686]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2263.031655]  ? lock_downgrade+0x6d0/0x6d0
[ 2263.032482]  ? find_held_lock+0x2c/0x110
[ 2263.033308]  ? io_submit_sqes+0x85c0/0x85c0
[ 2263.034182]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2263.035168]  ? wait_for_completion_io+0x270/0x270
[ 2263.036141]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2263.037067]  ? vfs_write+0x354/0xa70
[ 2263.037822]  ? fput_many+0x2f/0x1a0
[ 2263.038563]  ? ksys_write+0x1a9/0x260
[ 2263.039324]  ? __ia32_sys_read+0xb0/0xb0
[ 2263.040144]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2263.041191]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2263.042241]  do_syscall_64+0x33/0x40
[ 2263.042991]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2263.044014] RIP: 0033:0x7f3e76317b19
[ 2263.044768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2263.048447] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2263.049969] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2263.051415] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2263.052840] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2263.054268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2263.055694] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2263.079108] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2276.320857] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2276.335094] FAULT_INJECTION: forcing a failure.
[ 2276.335094] name failslab, interval 1, probability 0, space 0, times 0
[ 2276.337986] CPU: 0 PID: 13554 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2276.339437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2276.341157] Call Trace:
[ 2276.341711]  dump_stack+0x107/0x167
[ 2276.342479]  should_fail.cold+0x5/0xa
[ 2276.343253]  ? alloc_pid+0xd7/0xd30
[ 2276.344005]  should_failslab+0x5/0x20
[ 2276.344798]  kmem_cache_alloc+0x5b/0x310
[ 2276.345643]  alloc_pid+0xd7/0xd30
[ 2276.346388]  copy_process+0x3a8e/0x7800
[ 2276.347205]  ? stack_trace_save+0x8c/0xc0
[ 2276.348051]  ? stack_trace_consume_entry+0x160/0x160
[ 2276.349110]  ? __cleanup_sighand+0xb0/0xb0
[ 2276.349971]  ? __lockdep_reset_lock+0x180/0x180
[ 2276.350922]  ? lock_acquire+0x197/0x470
[ 2276.351734]  ? create_object.isra.0+0x3ad/0xa20
[ 2276.352685]  ? lock_release+0x680/0x680
[ 2276.353492]  ? find_held_lock+0x2c/0x110
[ 2276.354327]  ? io_wqe_dec_running+0x220/0x220
[ 2276.355318]  create_io_thread+0xb6/0xf0
[ 2276.356128]  ? pidfd_pid+0x90/0x90
[ 2276.356858]  ? mark_held_locks+0x9e/0xe0
[ 2276.357689]  ? io_wqe_dec_running+0x220/0x220
[ 2276.358692]  ? __init_swait_queue_head+0xc6/0x150
[ 2276.359680]  create_io_worker+0x23a/0x620
[ 2276.360554]  io_wqe_enqueue+0x69e/0xbe0
[ 2276.361370]  ? create_worker_cb+0x260/0x260
[ 2276.362265]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2276.363193]  ? io_prep_async_work+0x34e/0x540
[ 2276.364141]  io_queue_async_work+0x26b/0x4f0
[ 2276.365068]  __io_queue_sqe+0x5cc/0x9d0
[ 2276.365907]  ? io_issue_sqe+0x7700/0x7700
[ 2276.365927]  ? io_poll_queue_proc+0x50/0x50
[ 2276.365950]  ? io_prep_rw+0x7f5/0x1050
[ 2276.365977]  io_submit_sqes+0x4461/0x85c0
[ 2276.366033]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.366050]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.366075]  ? lock_downgrade+0x6d0/0x6d0
[ 2276.366091]  ? find_held_lock+0x2c/0x110
[ 2276.366116]  ? io_submit_sqes+0x85c0/0x85c0
[ 2276.366145]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2276.366169]  ? wait_for_completion_io+0x270/0x270
[ 2276.366192]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2276.366208]  ? vfs_write+0x354/0xa70
[ 2276.366231]  ? fput_many+0x2f/0x1a0
[ 2276.366252]  ? ksys_write+0x1a9/0x260
07:42:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)

07:42:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:42:46 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)

07:42:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:46 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240), 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2276.366271]  ? __ia32_sys_read+0xb0/0xb0
[ 2276.366296]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2276.366313]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2276.366339]  do_syscall_64+0x33/0x40
[ 2276.366383]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2276.366396] RIP: 0033:0x7f3e76317b19
[ 2276.366416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2276.366428] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2276.366452] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2276.366464] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2276.366475] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
07:42:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:42:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:42:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:42:46 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240), 0x0, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2276.366486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2276.366498] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2276.373835] FAULT_INJECTION: forcing a failure.
[ 2276.373835] name failslab, interval 1, probability 0, space 0, times 0
[ 2276.373849] CPU: 1 PID: 13555 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2276.373855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2276.373863] Call Trace:
[ 2276.373883]  dump_stack+0x107/0x167
[ 2276.373897]  should_fail.cold+0x5/0xa
[ 2276.373912]  ? __io_queue_sqe+0x666/0x9d0
[ 2276.373927]  should_failslab+0x5/0x20
[ 2276.373938]  kmem_cache_alloc_trace+0x55/0x320
[ 2276.373953]  __io_queue_sqe+0x666/0x9d0
[ 2276.373967]  ? io_issue_sqe+0x7700/0x7700
[ 2276.373981]  ? io_prep_rw+0x7f5/0x1050
[ 2276.373996]  io_submit_sqes+0x4461/0x85c0
[ 2276.374025]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.374035]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.374051]  ? lock_downgrade+0x6d0/0x6d0
[ 2276.374060]  ? find_held_lock+0x2c/0x110
[ 2276.374073]  ? io_submit_sqes+0x85c0/0x85c0
[ 2276.374091]  ? __mutex_unlock_slowpath+0xe1/0x600
07:42:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)

07:42:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)

07:42:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

[ 2276.374104]  ? wait_for_completion_io+0x270/0x270
[ 2276.374118]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2276.374129]  ? vfs_write+0x354/0xa70
[ 2276.374142]  ? fput_many+0x2f/0x1a0
[ 2276.374153]  ? ksys_write+0x1a9/0x260
[ 2276.374163]  ? __ia32_sys_read+0xb0/0xb0
[ 2276.374176]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2276.374186]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2276.374201]  do_syscall_64+0x33/0x40
[ 2276.374212]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2276.374220] RIP: 0033:0x7fca01abfb19
[ 2276.374231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2276.374237] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2276.374249] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2276.374256] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2276.374262] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2276.374268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2276.374274] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2276.514230] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[ 2276.573199] FAULT_INJECTION: forcing a failure.
[ 2276.573199] name failslab, interval 1, probability 0, space 0, times 0
[ 2276.573213] CPU: 1 PID: 13582 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2276.573220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2276.573224] Call Trace:
[ 2276.573245]  dump_stack+0x107/0x167
[ 2276.573260]  should_fail.cold+0x5/0xa
[ 2276.573274]  ? create_object.isra.0+0x3a/0xa20
[ 2276.573290]  should_failslab+0x5/0x20
[ 2276.573301]  kmem_cache_alloc+0x5b/0x310
[ 2276.573315]  create_object.isra.0+0x3a/0xa20
[ 2276.573326]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2276.573340]  kmem_cache_alloc+0x159/0x310
[ 2276.573359]  alloc_pid+0xd7/0xd30
[ 2276.573380]  copy_process+0x3a8e/0x7800
[ 2276.573395]  ? stack_trace_save+0x8c/0xc0
[ 2276.573406]  ? stack_trace_consume_entry+0x160/0x160
[ 2276.573432]  ? __cleanup_sighand+0xb0/0xb0
[ 2276.573444]  ? __lockdep_reset_lock+0x180/0x180
[ 2276.573454]  ? lock_acquire+0x197/0x470
[ 2276.573463]  ? create_object.isra.0+0x3ad/0xa20
[ 2276.573476]  ? lock_release+0x680/0x680
[ 2276.573486]  ? find_held_lock+0x2c/0x110
[ 2276.573502]  ? io_wqe_dec_running+0x220/0x220
[ 2276.573513]  create_io_thread+0xb6/0xf0
[ 2276.573522]  ? pidfd_pid+0x90/0x90
[ 2276.573532]  ? mark_held_locks+0x9e/0xe0
[ 2276.573545]  ? io_wqe_dec_running+0x220/0x220
[ 2276.573564]  ? __init_swait_queue_head+0xc6/0x150
[ 2276.573577]  create_io_worker+0x23a/0x620
[ 2276.573590]  io_wqe_enqueue+0x69e/0xbe0
[ 2276.573604]  ? create_worker_cb+0x260/0x260
[ 2276.573616]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2276.573631]  ? io_prep_async_work+0x34e/0x540
[ 2276.573646]  io_queue_async_work+0x26b/0x4f0
[ 2276.573661]  __io_queue_sqe+0x5cc/0x9d0
[ 2276.573675]  ? io_issue_sqe+0x7700/0x7700
[ 2276.573685]  ? io_poll_queue_proc+0x50/0x50
[ 2276.573698]  ? io_prep_rw+0x7f5/0x1050
[ 2276.573712]  io_submit_sqes+0x4461/0x85c0
[ 2276.573742]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.573751]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.573770]  ? io_submit_sqes+0x85c0/0x85c0
[ 2276.573783]  ? recalibrate_cpu_khz+0x10/0x10
[ 2276.573793]  ? ktime_get+0x158/0x1f0
[ 2276.573807]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 2276.573818]  ? clockevents_program_event+0x131/0x360
[ 2276.573831]  ? tick_program_event+0xa8/0x140
[ 2276.573843]  ? hrtimer_interrupt+0x771/0x9b0
[ 2276.573863]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2276.573873]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2276.573888]  do_syscall_64+0x33/0x40
[ 2276.573899]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2276.573907] RIP: 0033:0x7f3e76317b19
[ 2276.573918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2276.573924] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2276.573936] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2276.573943] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2276.573949] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2276.573955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2276.573961] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2276.574877] FAULT_INJECTION: forcing a failure.
[ 2276.574877] name failslab, interval 1, probability 0, space 0, times 0
[ 2276.574887] CPU: 1 PID: 13583 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2276.574892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2276.574895] Call Trace:
[ 2276.574906]  dump_stack+0x107/0x167
[ 2276.574919]  should_fail.cold+0x5/0xa
[ 2276.574930]  ? create_object.isra.0+0x3a/0xa20
[ 2276.574941]  should_failslab+0x5/0x20
[ 2276.574950]  kmem_cache_alloc+0x5b/0x310
[ 2276.574964]  create_object.isra.0+0x3a/0xa20
[ 2276.574975]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2276.574989]  kmem_cache_alloc_trace+0x151/0x320
[ 2276.575003]  __io_queue_sqe+0x666/0x9d0
[ 2276.575018]  ? io_issue_sqe+0x7700/0x7700
[ 2276.575032]  ? io_prep_rw+0x7f5/0x1050
[ 2276.575046]  io_submit_sqes+0x4461/0x85c0
[ 2276.575076]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.575086]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2276.575099]  ? lock_downgrade+0x6d0/0x6d0
[ 2276.575108]  ? find_held_lock+0x2c/0x110
[ 2276.575122]  ? io_submit_sqes+0x85c0/0x85c0
[ 2276.575137]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2276.575150]  ? wait_for_completion_io+0x270/0x270
[ 2276.575163]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2276.575173]  ? vfs_write+0x354/0xa70
[ 2276.575185]  ? fput_many+0x2f/0x1a0
[ 2276.575196]  ? ksys_write+0x1a9/0x260
[ 2276.575207]  ? __ia32_sys_read+0xb0/0xb0
[ 2276.575220]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2276.575230]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2276.575244]  do_syscall_64+0x33/0x40
[ 2276.575255]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2276.575262] RIP: 0033:0x7fca01abfb19
[ 2276.575272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2276.575277] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2276.575288] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 2276.575294] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2276.575300] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2276.575306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2276.575312] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
07:42:59 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:42:59 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:42:59 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba", 0x39, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:42:59 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:42:59 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23)

07:42:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)

07:42:59 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be3594916bd"}}, 0x2f)

07:42:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

07:42:59 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2289.053855] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[ 2289.080391] FAULT_INJECTION: forcing a failure.
[ 2289.080391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2289.083242] CPU: 1 PID: 13603 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 2289.084648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2289.086326] Call Trace:
[ 2289.086882]  dump_stack+0x107/0x167
[ 2289.087639]  should_fail.cold+0x5/0xa
[ 2289.088422]  _copy_to_user+0x2e/0x180
[ 2289.089209]  simple_read_from_buffer+0xcc/0x160
[ 2289.090187]  proc_fail_nth_read+0x198/0x230
[ 2289.091096]  ? proc_sessionid_read+0x230/0x230
[ 2289.092034]  ? security_file_permission+0x24e/0x570
[ 2289.093046]  ? perf_trace_initcall_start+0x101/0x380
[ 2289.094089]  ? proc_sessionid_read+0x230/0x230
[ 2289.095031]  vfs_read+0x228/0x580
[ 2289.095746]  ksys_read+0x12d/0x260
[ 2289.096470]  ? vfs_write+0xa70/0xa70
[ 2289.097232]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
07:42:59 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2289.098298]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2289.099727]  do_syscall_64+0x33/0x40
[ 2289.099770]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2289.099782] RIP: 0033:0x7fca01a7269c
[ 2289.099802] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2289.099813] RSP: 002b:00007fc9ff035170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2289.099835] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fca01a7269c
[ 2289.099846] RDX: 000000000000000f RSI: 00007fc9ff0351e0 RDI: 0000000000000006
[ 2289.099857] RBP: 00007fc9ff0351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.099868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
07:42:59 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
dup(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r2, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2289.099879] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 2289.113084] FAULT_INJECTION: forcing a failure.
[ 2289.113084] name failslab, interval 1, probability 0, space 0, times 0
[ 2289.113105] CPU: 1 PID: 13605 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2289.113115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
07:42:59 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

[ 2289.113121] Call Trace:
[ 2289.113142]  dump_stack+0x107/0x167
[ 2289.113166]  should_fail.cold+0x5/0xa
[ 2289.113187]  ? __io_queue_sqe+0x666/0x9d0
[ 2289.113208]  should_failslab+0x5/0x20
[ 2289.113227]  kmem_cache_alloc_trace+0x55/0x320
[ 2289.113254]  __io_queue_sqe+0x666/0x9d0
07:42:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)

[ 2289.113280]  ? io_issue_sqe+0x7700/0x7700
[ 2289.113305]  ? io_prep_rw+0x7f5/0x1050
[ 2289.113332]  io_submit_sqes+0x4461/0x85c0
[ 2289.113387]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2289.113404]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2289.113428]  ? lock_downgrade+0x6d0/0x6d0
[ 2289.113444]  ? find_held_lock+0x2c/0x110
[ 2289.113476]  ? io_submit_sqes+0x85c0/0x85c0
07:42:59 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

[ 2289.113506]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2289.113532]  ? wait_for_completion_io+0x270/0x270
07:42:59 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2289.113555]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2289.113571]  ? vfs_write+0x354/0xa70
[ 2289.113594]  ? fput_many+0x2f/0x1a0
07:42:59 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2289.113614]  ? ksys_write+0x1a9/0x260
[ 2289.113633]  ? __ia32_sys_read+0xb0/0xb0
[ 2289.113658]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2289.113675]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2289.113700]  do_syscall_64+0x33/0x40
[ 2289.113720]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2289.113732] RIP: 0033:0x7f3e76317b19
[ 2289.113752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2289.113762] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2289.113782] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2289.113793] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
07:42:59 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba", 0x39, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2289.113804] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.113815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2289.113827] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2289.154154] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[ 2289.275200] FAULT_INJECTION: forcing a failure.
[ 2289.275200] name failslab, interval 1, probability 0, space 0, times 0
[ 2289.275222] CPU: 1 PID: 13624 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2289.275234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2289.275240] Call Trace:
[ 2289.275268]  dump_stack+0x107/0x167
[ 2289.275292]  should_fail.cold+0x5/0xa
[ 2289.275314]  ? create_object.isra.0+0x3a/0xa20
[ 2289.275336]  should_failslab+0x5/0x20
[ 2289.275355]  kmem_cache_alloc+0x5b/0x310
[ 2289.275382]  create_object.isra.0+0x3a/0xa20
[ 2289.275401]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2289.275428]  kmem_cache_alloc_trace+0x151/0x320
[ 2289.275462]  __io_queue_sqe+0x666/0x9d0
[ 2289.275490]  ? io_issue_sqe+0x7700/0x7700
[ 2289.275516]  ? io_prep_rw+0x7f5/0x1050
[ 2289.275542]  io_submit_sqes+0x4461/0x85c0
[ 2289.275597]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2289.275615]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2289.275641]  ? lock_downgrade+0x6d0/0x6d0
[ 2289.275656]  ? find_held_lock+0x2c/0x110
[ 2289.275682]  ? io_submit_sqes+0x85c0/0x85c0
[ 2289.275711]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2289.275735]  ? wait_for_completion_io+0x270/0x270
[ 2289.275758]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2289.275775]  ? vfs_write+0x354/0xa70
[ 2289.275798]  ? fput_many+0x2f/0x1a0
[ 2289.275819]  ? ksys_write+0x1a9/0x260
[ 2289.275838]  ? __ia32_sys_read+0xb0/0xb0
[ 2289.275869]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2289.275887]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2289.275913]  do_syscall_64+0x33/0x40
[ 2289.275935]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2289.275947] RIP: 0033:0x7f3e76317b19
[ 2289.275968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2289.275978] RSP: 002b:00007f3e7388d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2289.276001] RAX: ffffffffffffffda RBX: 00007f3e7642af60 RCX: 00007f3e76317b19
[ 2289.276012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2289.276023] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.276034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2289.276046] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2289.276329] isofs_fill_super: get root inode failed
07:43:12 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba", 0x39, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:12 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:12 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
dup(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r2, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:12 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:12 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:43:12 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23)

07:43:12 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2302.532006] FAULT_INJECTION: forcing a failure.
[ 2302.532006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2302.533806] CPU: 1 PID: 13649 Comm: syz-executor.2 Not tainted 5.10.194 #1
[ 2302.534595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2302.535510] Call Trace:
[ 2302.535812]  dump_stack+0x107/0x167
[ 2302.536207]  should_fail.cold+0x5/0xa
[ 2302.536629]  _copy_to_user+0x2e/0x180
[ 2302.537040]  simple_read_from_buffer+0xcc/0x160
[ 2302.537558]  proc_fail_nth_read+0x198/0x230
[ 2302.538039]  ? proc_sessionid_read+0x230/0x230
[ 2302.538537]  ? security_file_permission+0x24e/0x570
[ 2302.539105]  ? perf_trace_initcall_start+0x101/0x380
[ 2302.539668]  ? proc_sessionid_read+0x230/0x230
[ 2302.540155]  vfs_read+0x228/0x580
[ 2302.540539]  ksys_read+0x12d/0x260
[ 2302.540918]  ? vfs_write+0xa70/0xa70
[ 2302.541325]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2302.541899]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2302.542458]  do_syscall_64+0x33/0x40
[ 2302.542871]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2302.543443] RIP: 0033:0x7f3e762ca69c
[ 2302.543865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2302.545832] RSP: 002b:00007f3e7388d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2302.546655] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3e762ca69c
[ 2302.547460] RDX: 000000000000000f RSI: 00007f3e7388d1e0 RDI: 0000000000000005
[ 2302.548256] RBP: 00007f3e7388d1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2302.549055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2302.549852] R13: 00007ffec7695c1f R14: 00007f3e7388d300 R15: 0000000000022000
[ 2302.561879] isofs_fill_super: get root inode failed
07:43:13 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:13 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:13 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43"}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:13 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2302.623672] isofs_fill_super: get root inode failed
07:43:13 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be3"}}, 0x2b)

07:43:13 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

07:43:13 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:27 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:27 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:27 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:27 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

07:43:27 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

[ 2317.173545] isofs_fill_super: get root inode failed
[ 2317.192333] FAULT_INJECTION: forcing a failure.
[ 2317.192333] name failslab, interval 1, probability 0, space 0, times 0
[ 2317.194792] CPU: 0 PID: 13693 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2317.196302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2317.197963] Call Trace:
[ 2317.198505]  dump_stack+0x107/0x167
[ 2317.199259]  should_fail.cold+0x5/0xa
[ 2317.200048]  should_failslab+0x5/0x20
[ 2317.200821]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2317.201741]  io_submit_sqes+0x6f76/0x85c0
[ 2317.202595]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2317.203624]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2317.204632]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2317.205613]  ? lock_downgrade+0x6d0/0x6d0
[ 2317.206468]  ? find_held_lock+0x2c/0x110
[ 2317.207298]  ? io_submit_sqes+0x85c0/0x85c0
[ 2317.208178]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2317.209149]  ? wait_for_completion_io+0x270/0x270
[ 2317.210121]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2317.211070]  ? vfs_write+0x354/0xa70
[ 2317.211828]  ? fput_many+0x2f/0x1a0
[ 2317.212562]  ? ksys_write+0x1a9/0x260
[ 2317.213328]  ? __ia32_sys_read+0xb0/0xb0
[ 2317.214155]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2317.215219]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2317.216257]  do_syscall_64+0x33/0x40
[ 2317.217008]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2317.218037] RIP: 0033:0x7f5f670fdb19
[ 2317.218789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2317.222475] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2317.224023] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2317.225459] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2317.226903] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2317.228335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2317.229768] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:43:27 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:43:27 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
syz_open_dev$sg(&(0x7f0000000bc0), 0x878f, 0x101002)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:27 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055", 0x56, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:27 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:27 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:27 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:43:27 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0)

07:43:27 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2317.406351] isofs_fill_super: get root inode failed
07:43:27 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055", 0x56, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:42 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e8"}}, 0x27)

07:43:42 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055", 0x56, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:42 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:42 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

07:43:42 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:42 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:42 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0)

07:43:42 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0)

[ 2332.368374] FAULT_INJECTION: forcing a failure.
[ 2332.368374] name failslab, interval 1, probability 0, space 0, times 0
[ 2332.371383] CPU: 1 PID: 13741 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2332.372802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2332.374574] Call Trace:
[ 2332.374610]  dump_stack+0x107/0x167
[ 2332.374643]  should_fail.cold+0x5/0xa
[ 2332.374673]  ? create_object.isra.0+0x3a/0xa20
[ 2332.374703]  should_failslab+0x5/0x20
[ 2332.374727]  kmem_cache_alloc+0x5b/0x310
[ 2332.374763]  create_object.isra.0+0x3a/0xa20
[ 2332.374786]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2332.374813]  kmem_cache_alloc_bulk+0x168/0x320
[ 2332.374841]  io_submit_sqes+0x6f76/0x85c0
[ 2332.374866]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2332.374915]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
07:43:42 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

[ 2332.374933]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2332.374961]  ? lock_downgrade+0x6d0/0x6d0
07:43:42 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2332.374977]  ? find_held_lock+0x2c/0x110
[ 2332.375003]  ? io_submit_sqes+0x85c0/0x85c0
07:43:42 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

[ 2332.375032]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2332.375067]  ? wait_for_completion_io+0x270/0x270
[ 2332.375092]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2332.375109]  ? vfs_write+0x354/0xa70
[ 2332.375133]  ? fput_many+0x2f/0x1a0
[ 2332.375154]  ? ksys_write+0x1a9/0x260
[ 2332.375174]  ? __ia32_sys_read+0xb0/0xb0
[ 2332.375199]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2332.375216]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2332.375243]  do_syscall_64+0x33/0x40
07:43:43 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0)

[ 2332.375264]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2332.375277] RIP: 0033:0x7f5f670fdb19
[ 2332.375298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2332.375309] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
07:43:43 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2332.375331] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2332.375342] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2332.375353] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2332.375365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2332.375376] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2332.425154] isofs_fill_super: get root inode failed
[ 2332.559219] FAULT_INJECTION: forcing a failure.
[ 2332.559219] name failslab, interval 1, probability 0, space 0, times 0
[ 2332.577664] CPU: 0 PID: 13765 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2332.579080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2332.580769] Call Trace:
[ 2332.581316]  dump_stack+0x107/0x167
[ 2332.582063]  should_fail.cold+0x5/0xa
[ 2332.582839]  ? create_object.isra.0+0x3a/0xa20
[ 2332.583788]  ? create_object.isra.0+0x3a/0xa20
[ 2332.584711]  should_failslab+0x5/0x20
[ 2332.585474]  kmem_cache_alloc+0x5b/0x310
[ 2332.586299]  create_object.isra.0+0x3a/0xa20
[ 2332.587202]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2332.588238]  kmem_cache_alloc_bulk+0x168/0x320
[ 2332.589175]  io_submit_sqes+0x6f76/0x85c0
[ 2332.590023]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2332.591041]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2332.592045]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2332.593010]  ? lock_downgrade+0x6d0/0x6d0
[ 2332.593857]  ? find_held_lock+0x2c/0x110
[ 2332.594692]  ? io_submit_sqes+0x85c0/0x85c0
[ 2332.595601]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2332.596587]  ? wait_for_completion_io+0x270/0x270
[ 2332.597564]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2332.598500]  ? vfs_write+0x354/0xa70
[ 2332.599262]  ? fput_many+0x2f/0x1a0
[ 2332.600005]  ? ksys_write+0x1a9/0x260
[ 2332.600774]  ? __ia32_sys_read+0xb0/0xb0
[ 2332.601605]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2332.602663]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2332.603708]  do_syscall_64+0x33/0x40
[ 2332.604463]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2332.605495] RIP: 0033:0x7f5f670fdb19
[ 2332.606248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2332.609957] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2332.611499] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2332.612942] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2332.614387] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2332.615856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2332.617299] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:43:43 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc7904241", 0x64, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:43 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0)

07:43:43 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

07:43:43 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2332.696041] isofs_fill_super: get root inode failed
07:43:43 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:43 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:43 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0)

07:43:43 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x287, 0x0, 0x0, 0x0)

07:43:56 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:43:56 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:56 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:43:56 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

[ 2345.629522] isofs_fill_super: get root inode failed
07:43:56 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0)

07:43:56 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc7904241", 0x64, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:43:56 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x60, 0x0, 0x0, 0x0)

07:43:56 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

07:43:56 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2345.735177] FAULT_INJECTION: forcing a failure.
[ 2345.735177] name failslab, interval 1, probability 0, space 0, times 0
[ 2345.737867] CPU: 1 PID: 13828 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2345.739260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2345.740969] Call Trace:
[ 2345.741509]  dump_stack+0x107/0x167
[ 2345.742258]  should_fail.cold+0x5/0xa
[ 2345.743028]  ? create_object.isra.0+0x3a/0xa20
[ 2345.743956]  should_failslab+0x5/0x20
[ 2345.744708]  kmem_cache_alloc+0x5b/0x310
[ 2345.745522]  ? mark_held_locks+0x9e/0xe0
[ 2345.746342]  create_object.isra.0+0x3a/0xa20
[ 2345.747215]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2345.748254]  kmem_cache_alloc_bulk+0x168/0x320
[ 2345.749162]  io_submit_sqes+0x6f76/0x85c0
[ 2345.749976]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2345.750985]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2345.751974]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2345.752925]  ? lock_downgrade+0x6d0/0x6d0
[ 2345.753731]  ? find_held_lock+0x2c/0x110
[ 2345.754529]  ? io_submit_sqes+0x85c0/0x85c0
[ 2345.755406]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2345.756351]  ? wait_for_completion_io+0x270/0x270
[ 2345.757293]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2345.758192]  ? vfs_write+0x354/0xa70
[ 2345.758924]  ? fput_many+0x2f/0x1a0
[ 2345.759663]  ? ksys_write+0x1a9/0x260
[ 2345.760408]  ? __ia32_sys_read+0xb0/0xb0
[ 2345.761202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2345.762217]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2345.763283]  do_syscall_64+0x33/0x40
[ 2345.764020]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2345.765057] RIP: 0033:0x7f5f670fdb19
[ 2345.765800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2345.769539] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2345.771109] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2345.772581] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2345.774046] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2345.775531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2345.777000] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:43:56 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:43:56 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:43:56 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x215, 0x0, 0x0, 0x0)

07:43:56 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xcc0, 0x0, 0x0, 0x0)

[ 2345.897112] isofs_fill_super: get root inode failed
07:44:10 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

07:44:10 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0)

07:44:10 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:44:10 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

07:44:10 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc7904241", 0x64, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:10 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:44:10 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:10 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2359.587031] isofs_fill_super: get root inode failed
[ 2359.618038] FAULT_INJECTION: forcing a failure.
[ 2359.618038] name failslab, interval 1, probability 0, space 0, times 0
[ 2359.620949] CPU: 1 PID: 13872 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2359.622359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2359.624071] Call Trace:
[ 2359.624616]  dump_stack+0x107/0x167
[ 2359.625359]  should_fail.cold+0x5/0xa
[ 2359.626139]  ? create_object.isra.0+0x3a/0xa20
[ 2359.627069]  should_failslab+0x5/0x20
[ 2359.627866]  kmem_cache_alloc+0x5b/0x310
[ 2359.628699]  ? mark_held_locks+0x9e/0xe0
[ 2359.629536]  create_object.isra.0+0x3a/0xa20
[ 2359.630432]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2359.631482]  kmem_cache_alloc_bulk+0x168/0x320
07:44:10 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

07:44:10 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01", 0x6b, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2359.632420]  io_submit_sqes+0x6f76/0x85c0
[ 2359.633535]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2359.634534]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2359.635569]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2359.636536]  ? lock_downgrade+0x6d0/0x6d0
[ 2359.637380]  ? find_held_lock+0x2c/0x110
[ 2359.638206]  ? io_submit_sqes+0x85c0/0x85c0
[ 2359.639097]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2359.640076]  ? wait_for_completion_io+0x270/0x270
[ 2359.641059]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2359.641986]  ? vfs_write+0x354/0xa70
[ 2359.642747]  ? fput_many+0x2f/0x1a0
07:44:10 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3559, 0x0, 0x0, 0x0)

[ 2359.643487]  ? ksys_write+0x1a9/0x260
[ 2359.644333]  ? __ia32_sys_read+0xb0/0xb0
[ 2359.645153]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2359.646190]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2359.647220]  do_syscall_64+0x33/0x40
[ 2359.647984]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2359.649007] RIP: 0033:0x7f5f670fdb19
[ 2359.649763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2359.653413] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2359.654923] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2359.656351] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2359.657769] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2359.659179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2359.660593] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:44:10 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:10 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e86583"}}, 0x29)

07:44:10 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:10 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xcc0, 0x0, 0x0, 0x0)

[ 2359.809734] isofs_fill_super: get root inode failed
[ 2372.292077] FAULT_INJECTION: forcing a failure.
07:44:22 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:44:22 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0)

07:44:22 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x1502, 0x0, 0x0, 0x0)

07:44:22 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01", 0x6b, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:22 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:22 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:44:22 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055", 0x56, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:22 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2372.292077] name failslab, interval 1, probability 0, space 0, times 0
[ 2372.293733] CPU: 1 PID: 13908 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2372.294510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2372.295406] Call Trace:
[ 2372.295721]  dump_stack+0x107/0x167
[ 2372.296112]  should_fail.cold+0x5/0xa
[ 2372.296535]  ? create_object.isra.0+0x3a/0xa20
[ 2372.297039]  should_failslab+0x5/0x20
[ 2372.297453]  kmem_cache_alloc+0x5b/0x310
[ 2372.297904]  ? mark_held_locks+0x9e/0xe0
[ 2372.298355]  create_object.isra.0+0x3a/0xa20
[ 2372.298842]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2372.299408]  kmem_cache_alloc_bulk+0x168/0x320
[ 2372.299922]  io_submit_sqes+0x6f76/0x85c0
[ 2372.300405]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2372.301019]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2372.301569]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2372.302118]  ? io_submit_sqes+0x85c0/0x85c0
[ 2372.302596]  ? recalibrate_cpu_khz+0x10/0x10
[ 2372.303071]  ? ktime_get+0x158/0x1f0
[ 2372.303487]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 2372.303982]  ? clockevents_program_event+0x131/0x360
[ 2372.304542]  ? tick_program_event+0xa8/0x140
[ 2372.305025]  ? hrtimer_interrupt+0x771/0x9b0
[ 2372.305519]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2372.306088]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2372.306665]  do_syscall_64+0x33/0x40
[ 2372.307077]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2372.307639] RIP: 0033:0x7f5f670fdb19
[ 2372.308048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2372.310072] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2372.310914] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2372.311716] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2372.312487] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2372.313257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2372.314022] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2372.317229] isofs_fill_super: get root inode failed
07:44:22 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:22 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0)

07:44:22 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a) (fail_nth: 1)

07:44:22 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:22 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

[ 2372.481879] FAULT_INJECTION: forcing a failure.
[ 2372.481879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2372.484340] CPU: 0 PID: 13939 Comm: syz-executor.4 Not tainted 5.10.194 #1
07:44:22 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01", 0x6b, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:22 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

[ 2372.485719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2372.487475] Call Trace:
[ 2372.488035]  dump_stack+0x107/0x167
[ 2372.488778]  should_fail.cold+0x5/0xa
[ 2372.489557]  _copy_from_user+0x2e/0x1b0
[ 2372.490393]  sg_write.part.0+0x1cf/0xaa0
[ 2372.491249]  ? sg_new_write.isra.0+0x770/0x770
[ 2372.492187]  ? perf_trace_lock+0xac/0x490
[ 2372.493028]  ? SOFTIRQ_verbose+0x10/0x10
[ 2372.493862]  ? __lockdep_reset_lock+0x180/0x180
[ 2372.494804]  ? __lockdep_reset_lock+0x180/0x180
[ 2372.495788]  ? lock_acquire+0x197/0x470
[ 2372.496597]  ? find_held_lock+0x2c/0x110
[ 2372.497456]  ? _cond_resched+0x12/0x80
[ 2372.498257]  ? inode_security+0x107/0x140
[ 2372.499109]  ? avc_policy_seqno+0x9/0x70
[ 2372.499961]  ? selinux_file_permission+0x92/0x520
[ 2372.500964]  ? security_file_permission+0x24e/0x570
[ 2372.501981]  ? __fget_files+0x296/0x4c0
[ 2372.502803]  sg_write+0x87/0x120
[ 2372.503502]  ? sg_write.part.0+0xaa0/0xaa0
[ 2372.504378]  vfs_write+0x29a/0xa70
[ 2372.505135]  ksys_write+0x12d/0x260
[ 2372.505886]  ? __ia32_sys_read+0xb0/0xb0
[ 2372.506737]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2372.507820] FAULT_INJECTION: forcing a failure.
[ 2372.507820] name failslab, interval 1, probability 0, space 0, times 0
[ 2372.510067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2372.511148]  do_syscall_64+0x33/0x40
[ 2372.511948]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2372.513001] RIP: 0033:0x7fb0e52a1b19
[ 2372.513780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2372.517594] RSP: 002b:00007fb0e2817188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2372.519172] RAX: ffffffffffffffda RBX: 00007fb0e53b4f60 RCX: 00007fb0e52a1b19
[ 2372.520641] RDX: 000000000000002a RSI: 0000000020000180 RDI: 0000000000000005
[ 2372.522121] RBP: 00007fb0e28171d0 R08: 0000000000000000 R09: 0000000000000000
[ 2372.523597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2372.525074] R13: 00007fff805f892f R14: 00007fb0e2817300 R15: 0000000000022000
[ 2372.526603] CPU: 1 PID: 13946 Comm: syz-executor.1 Not tainted 5.10.194 #1
07:44:22 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2372.527451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2372.528548] Call Trace:
[ 2372.528852]  dump_stack+0x107/0x167
[ 2372.529261]  should_fail.cold+0x5/0xa
[ 2372.529689]  ? create_object.isra.0+0x3a/0xa20
[ 2372.530173]  should_failslab+0x5/0x20
[ 2372.530601]  kmem_cache_alloc+0x5b/0x310
[ 2372.531056]  ? mark_held_locks+0x9e/0xe0
[ 2372.531502]  create_object.isra.0+0x3a/0xa20
[ 2372.532001]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2372.532550]  kmem_cache_alloc_bulk+0x168/0x320
[ 2372.533069]  io_submit_sqes+0x6f76/0x85c0
[ 2372.533536]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2372.534092]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2372.534644]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2372.535159]  ? lock_downgrade+0x6d0/0x6d0
[ 2372.535625]  ? find_held_lock+0x2c/0x110
[ 2372.536056]  ? io_submit_sqes+0x85c0/0x85c0
[ 2372.536542]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2372.537090]  ? wait_for_completion_io+0x270/0x270
[ 2372.537625]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2372.538143]  ? vfs_write+0x354/0xa70
[ 2372.538561]  ? fput_many+0x2f/0x1a0
[ 2372.538973]  ? ksys_write+0x1a9/0x260
[ 2372.539388]  ? __ia32_sys_read+0xb0/0xb0
[ 2372.539848]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2372.540431]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2372.541009]  do_syscall_64+0x33/0x40
[ 2372.541419]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2372.541987] RIP: 0033:0x7f5f670fdb19
[ 2372.542392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2372.544431] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2372.545272] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2372.546060] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2372.546844] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2372.547629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2372.548412] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2372.566318] isofs_fill_super: get root inode failed
07:44:23 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:36 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a) (fail_nth: 2)

07:44:36 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3", 0x6f, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:36 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:44:36 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x5935, 0x0, 0x0, 0x0)

07:44:36 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3564, 0x0, 0x0, 0x0)

07:44:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

07:44:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2385.906992] FAULT_INJECTION: forcing a failure.
[ 2385.906992] name failslab, interval 1, probability 0, space 0, times 0
[ 2385.908836] CPU: 0 PID: 13974 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2385.909870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2385.911128] Call Trace:
[ 2385.911556]  dump_stack+0x107/0x167
[ 2385.912134]  should_fail.cold+0x5/0xa
[ 2385.912731]  ? create_object.isra.0+0x3a/0xa20
[ 2385.913432]  should_failslab+0x5/0x20
[ 2385.914013]  kmem_cache_alloc+0x5b/0x310
[ 2385.914632]  ? mark_held_locks+0x9e/0xe0
[ 2385.915254]  create_object.isra.0+0x3a/0xa20
[ 2385.915945]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2385.916719]  kmem_cache_alloc_bulk+0x168/0x320
[ 2385.917422]  io_submit_sqes+0x6f76/0x85c0
[ 2385.918069]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2385.918819]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2385.919573]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2385.920309]  ? lock_downgrade+0x6d0/0x6d0
[ 2385.920926]  ? find_held_lock+0x2c/0x110
[ 2385.921539]  ? io_submit_sqes+0x85c0/0x85c0
[ 2385.922198]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2385.922923]  ? wait_for_completion_io+0x270/0x270
[ 2385.923650]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2385.924366]  ? vfs_write+0x354/0xa70
[ 2385.924924]  ? fput_many+0x2f/0x1a0
[ 2385.925487]  ? ksys_write+0x1a9/0x260
[ 2385.926062]  ? __ia32_sys_read+0xb0/0xb0
[ 2385.926671]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2385.927462]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2385.928274]  do_syscall_64+0x33/0x40
[ 2385.928838]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2385.929609] RIP: 0033:0x7f5f670fdb19
[ 2385.930176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2385.932947] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2385.934092] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2385.935149] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2385.936210] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2385.937258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2385.938309] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2385.960651] isofs_fill_super: get root inode failed
[ 2385.986245] FAULT_INJECTION: forcing a failure.
[ 2385.986245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2385.988675] CPU: 1 PID: 13985 Comm: syz-executor.4 Not tainted 5.10.194 #1
[ 2385.990094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2385.991823] Call Trace:
[ 2385.992388]  dump_stack+0x107/0x167
[ 2385.992421]  should_fail.cold+0x5/0xa
[ 2385.992458]  _copy_to_user+0x2e/0x180
[ 2385.992495]  simple_read_from_buffer+0xcc/0x160
[ 2385.992530]  proc_fail_nth_read+0x198/0x230
[ 2385.992561]  ? proc_sessionid_read+0x230/0x230
[ 2385.992582]  ? security_file_permission+0x24e/0x570
[ 2385.992602]  ? perf_trace_initcall_start+0x101/0x380
[ 2385.992646]  ? proc_sessionid_read+0x230/0x230
07:44:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2385.992667]  vfs_read+0x228/0x580
[ 2385.992706]  ksys_read+0x12d/0x260
[ 2385.992729]  ? vfs_write+0xa70/0xa70
[ 2385.992763]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2385.992784]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2385.992820]  do_syscall_64+0x33/0x40
07:44:36 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x8702, 0x0, 0x0, 0x0)

[ 2385.992844]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2385.992859] RIP: 0033:0x7fb0e525469c
07:44:36 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:36 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3", 0x6f, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2385.992881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
07:44:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:44:36 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

[ 2385.992893] RSP: 002b:00007fb0e2817170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2385.992918] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb0e525469c
07:44:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2385.992931] RDX: 000000000000000f RSI: 00007fb0e28171e0 RDI: 0000000000000006
[ 2385.992944] RBP: 00007fb0e28171d0 R08: 0000000000000000 R09: 0000000000000000
[ 2385.992957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2385.992969] R13: 00007fff805f892f R14: 00007fb0e2817300 R15: 0000000000022000
07:44:36 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0)

[ 2386.155565] isofs_fill_super: get root inode failed
[ 2386.175931] FAULT_INJECTION: forcing a failure.
[ 2386.175931] name failslab, interval 1, probability 0, space 0, times 0
[ 2386.177587] CPU: 0 PID: 14003 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2386.178528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2386.179678] Call Trace:
[ 2386.180061]  dump_stack+0x107/0x167
[ 2386.180567]  should_fail.cold+0x5/0xa
[ 2386.181098]  ? create_object.isra.0+0x3a/0xa20
[ 2386.181718]  should_failslab+0x5/0x20
[ 2386.182238]  kmem_cache_alloc+0x5b/0x310
[ 2386.182791]  ? mark_held_locks+0x9e/0xe0
[ 2386.183349]  create_object.isra.0+0x3a/0xa20
[ 2386.183966]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2386.184663]  kmem_cache_alloc_bulk+0x168/0x320
[ 2386.185292]  io_submit_sqes+0x6f76/0x85c0
[ 2386.185867]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2386.186544]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2386.187229]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2386.187899]  ? lock_downgrade+0x6d0/0x6d0
[ 2386.188472]  ? find_held_lock+0x2c/0x110
[ 2386.189034]  ? io_submit_sqes+0x85c0/0x85c0
[ 2386.189629]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2386.190284]  ? wait_for_completion_io+0x270/0x270
[ 2386.190939]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2386.191570]  ? vfs_write+0x354/0xa70
[ 2386.192099]  ? copy_kernel_to_fpregs+0x9e/0xe0
[ 2386.192725]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 2386.193463]  ? ksys_write+0x1a9/0x260
[ 2386.194019]  ? __ia32_sys_read+0xb0/0xb0
[ 2386.194582]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2386.195298]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2386.196021]  do_syscall_64+0x33/0x40
[ 2386.196528]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2386.197228] RIP: 0033:0x7f5f670fdb19
[ 2386.197738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2386.200229] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2386.201259] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2386.202226] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2386.203200] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2386.204196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2386.205166] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:44:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:36 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:44:36 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb23909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:44:36 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xc00c, 0x0, 0x0, 0x0)

07:44:36 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3", 0x6f, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:36 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:50 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9", 0x71, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:44:50 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:44:50 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:44:50 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:44:50 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb29909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:44:50 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:44:50 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0)

[ 2400.435422] FAULT_INJECTION: forcing a failure.
[ 2400.435422] name failslab, interval 1, probability 0, space 0, times 0
07:44:50 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

[ 2400.437425] CPU: 0 PID: 14050 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2400.438477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2400.439595] Call Trace:
[ 2400.439974]  dump_stack+0x107/0x167
[ 2400.440472]  should_fail.cold+0x5/0xa
[ 2400.440993]  ? __io_queue_sqe+0x666/0x9d0
[ 2400.441559]  should_failslab+0x5/0x20
[ 2400.442083]  kmem_cache_alloc_trace+0x55/0x320
[ 2400.442722]  __io_queue_sqe+0x666/0x9d0
[ 2400.443269]  ? io_issue_sqe+0x7700/0x7700
[ 2400.443842]  ? io_prep_rw+0x7f5/0x1050
[ 2400.444397]  io_submit_sqes+0x4461/0x85c0
[ 2400.444991]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2400.445671]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2400.446342]  ? lock_downgrade+0x6d0/0x6d0
[ 2400.446910]  ? find_held_lock+0x2c/0x110
[ 2400.447469]  ? io_submit_sqes+0x85c0/0x85c0
[ 2400.448084]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2400.448746]  ? wait_for_completion_io+0x270/0x270
[ 2400.449408]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2400.450042]  ? vfs_write+0x354/0xa70
[ 2400.450558]  ? fput_many+0x2f/0x1a0
[ 2400.451063]  ? ksys_write+0x1a9/0x260
[ 2400.451586]  ? __ia32_sys_read+0xb0/0xb0
[ 2400.452152]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2400.452869]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2400.453581]  do_syscall_64+0x33/0x40
[ 2400.454097]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2400.454804] RIP: 0033:0x7f5f670fdb19
[ 2400.455332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2400.457846] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2400.458887] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2400.459859] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2400.460846] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2400.461816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2400.462792] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:44:50 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x6000, 0x0, 0x0, 0x0)

07:44:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2400.553955] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:04 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:45:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x23)

07:45:04 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:04 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0)

07:45:04 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9", 0x71, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x6435, 0x0, 0x0, 0x0)

07:45:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

[ 2413.843315] FAULT_INJECTION: forcing a failure.
[ 2413.843315] name failslab, interval 1, probability 0, space 0, times 0
[ 2413.845287] CPU: 1 PID: 14082 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2413.846315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2413.847554] Call Trace:
[ 2413.847962]  dump_stack+0x107/0x167
[ 2413.848525]  should_fail.cold+0x5/0xa
[ 2413.849123]  ? create_object.isra.0+0x3a/0xa20
[ 2413.849854]  should_failslab+0x5/0x20
[ 2413.850453]  kmem_cache_alloc+0x5b/0x310
[ 2413.851102]  create_object.isra.0+0x3a/0xa20
[ 2413.851788]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2413.852594]  kmem_cache_alloc_trace+0x151/0x320
[ 2413.853319]  __io_queue_sqe+0x666/0x9d0
[ 2413.853947]  ? io_issue_sqe+0x7700/0x7700
[ 2413.854588]  ? io_prep_rw+0x7f5/0x1050
[ 2413.855211]  io_submit_sqes+0x4461/0x85c0
[ 2413.855892]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2413.856673]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2413.857414]  ? lock_downgrade+0x6d0/0x6d0
[ 2413.858043]  ? find_held_lock+0x2c/0x110
[ 2413.858663]  ? io_submit_sqes+0x85c0/0x85c0
[ 2413.859333]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2413.860069]  ? wait_for_completion_io+0x270/0x270
[ 2413.860854]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2413.861559]  ? vfs_write+0x354/0xa70
[ 2413.862129]  ? fput_many+0x2f/0x1a0
[ 2413.862683]  ? ksys_write+0x1a9/0x260
[ 2413.863258]  ? __ia32_sys_read+0xb0/0xb0
[ 2413.863876]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2413.864675]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2413.865451]  do_syscall_64+0x33/0x40
[ 2413.866015]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2413.866786] RIP: 0033:0x7f5f670fdb19
[ 2413.867345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2413.870110] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2413.870127] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2413.870136] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2413.870145] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2413.870154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2413.870162] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2413.923910] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x29)

07:45:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0)

07:45:04 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xc00c, 0x0, 0x0, 0x0)

07:45:04 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x200001aa)

07:45:04 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9", 0x71, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

[ 2414.152788] FAULT_INJECTION: forcing a failure.
[ 2414.152788] name failslab, interval 1, probability 0, space 0, times 0
[ 2414.155809] sg_write: data in/out 1426063324/536871152 bytes for SCSI command 0xfb-- guessing data in;
[ 2414.155809]    program syz-executor.4 not setting count and/or reply_len properly
[ 2414.159664] CPU: 0 PID: 14127 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2414.161092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2414.162791] Call Trace:
[ 2414.163343]  dump_stack+0x107/0x167
[ 2414.164118]  should_fail.cold+0x5/0xa
[ 2414.164903]  ? create_io_worker+0xe8/0x620
[ 2414.165741] sg_write: data in/out 1426063324/536871152 bytes for SCSI command 0xfb-- guessing data in;
[ 2414.165741]    program syz-executor.4 not setting count and/or reply_len properly
[ 2414.165771]  ? create_io_worker+0xe8/0x620
[ 2414.168932]  should_failslab+0x5/0x20
[ 2414.169684]  kmem_cache_alloc_node_trace+0x59/0x340
[ 2414.170708]  create_io_worker+0xe8/0x620
[ 2414.171569]  io_wqe_enqueue+0x69e/0xbe0
[ 2414.172407]  ? create_worker_cb+0x260/0x260
[ 2414.173310]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2414.174236]  ? io_prep_async_work+0x34e/0x540
[ 2414.175158]  io_queue_async_work+0x26b/0x4f0
[ 2414.176066]  __io_queue_sqe+0x5cc/0x9d0
[ 2414.176917]  ? io_issue_sqe+0x7700/0x7700
[ 2414.177766]  ? io_poll_queue_proc+0x50/0x50
[ 2414.178649]  ? io_prep_rw+0x7f5/0x1050
[ 2414.179460]  io_submit_sqes+0x4461/0x85c0
[ 2414.180356]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2414.181374]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2414.182363]  ? lock_downgrade+0x6d0/0x6d0
[ 2414.183208]  ? find_held_lock+0x2c/0x110
[ 2414.184039]  ? io_submit_sqes+0x85c0/0x85c0
[ 2414.184938]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2414.185937]  ? wait_for_completion_io+0x270/0x270
[ 2414.186943]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2414.187891]  ? vfs_write+0x354/0xa70
[ 2414.188663]  ? fput_many+0x2f/0x1a0
[ 2414.189407]  ? ksys_write+0x1a9/0x260
[ 2414.190186]  ? __ia32_sys_read+0xb0/0xb0
[ 2414.191028]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2414.192116]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2414.193177]  do_syscall_64+0x33/0x40
[ 2414.193940]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2414.194985] RIP: 0033:0x7f5f670fdb19
[ 2414.195747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2414.199532] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2414.201113] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2414.202571] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2414.204061] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2414.205513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2414.206974] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2414.226842] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, 0x0)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:45:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x600000, 0x0, 0x0, 0x0)

07:45:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0)

07:45:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)

07:45:18 executing program 4:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
read(r0, 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x96)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe30a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(r3)
fsmount(r4, 0x1, 0x8e)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r4, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2428.247962] FAULT_INJECTION: forcing a failure.
[ 2428.247962] name failslab, interval 1, probability 0, space 0, times 0
[ 2428.249830] CPU: 1 PID: 14149 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2428.250613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2428.251507] Call Trace:
[ 2428.251528]  dump_stack+0x107/0x167
[ 2428.251542]  should_fail.cold+0x5/0xa
[ 2428.251566]  ? create_object.isra.0+0x3a/0xa20
[ 2428.253423]  should_failslab+0x5/0x20
[ 2428.253856]  kmem_cache_alloc+0x5b/0x310
[ 2428.254320]  ? lock_acquire+0x197/0x470
[ 2428.254774]  create_object.isra.0+0x3a/0xa20
[ 2428.255266]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2428.255822]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2428.256403]  create_io_worker+0xe8/0x620
[ 2428.256858]  io_wqe_enqueue+0x69e/0xbe0
[ 2428.257312]  ? create_worker_cb+0x260/0x260
[ 2428.257775]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2428.258293]  ? io_prep_async_work+0x34e/0x540
[ 2428.258805]  io_queue_async_work+0x26b/0x4f0
[ 2428.259315]  __io_queue_sqe+0x5cc/0x9d0
[ 2428.259759]  ? io_issue_sqe+0x7700/0x7700
[ 2428.260227]  ? io_poll_queue_proc+0x50/0x50
[ 2428.260724]  ? io_prep_rw+0x7f5/0x1050
[ 2428.261155]  io_submit_sqes+0x4461/0x85c0
[ 2428.261639]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2428.262191]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2428.262741]  ? lock_downgrade+0x6d0/0x6d0
[ 2428.263211]  ? find_held_lock+0x2c/0x110
[ 2428.263678]  ? io_submit_sqes+0x85c0/0x85c0
[ 2428.264166]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2428.264714]  ? wait_for_completion_io+0x270/0x270
[ 2428.265267]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2428.265779]  ? vfs_write+0x354/0xa70
[ 2428.266194]  ? fput_many+0x2f/0x1a0
[ 2428.266604]  ? ksys_write+0x1a9/0x260
[ 2428.267027]  ? __ia32_sys_read+0xb0/0xb0
[ 2428.267481]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2428.268070]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2428.268668]  do_syscall_64+0x33/0x40
[ 2428.269085]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2428.269658] RIP: 0033:0x7f5f670fdb19
[ 2428.270076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2428.272126] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2428.272938] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2428.273692] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2428.274458] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2428.275215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2428.275971] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:45:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:45:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:45:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x39, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x10403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb69b6a7fd98b43b23b062706cea2196c61fb42e865830b1db6b03ff69232b24ef76506bc615d889bd2d6a9da5fd3d82f1da48855f2a87ba355cdc85d3cbfaaa2aa38e09e48cfc9302b386236cfb2d7ea0e6fabf0183a54c079b1a8ffb530d065347e583891f1c8212729ecf0a6dcf765f5fa95065c860f23a3c6a92f0e20c6fc957d7167e29c9c18c5d3f4d7f9ba5ca58159"], 0x2a)

07:45:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:45:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, 0x0)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)

07:45:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6cd42b0eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"], 0x2a)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="6af05f08dcb436a430902767e3b01e1e70d51740fc98adb2631250cef9e6d4b480ab9187c9dc82c88884e3753547ee1b1b3b01a0944936a5352c79091f659e68e5d32f21257d83c36d0207683fa03e6ad1743a02816b4247bf5d08bc0a8ab9275b68a0d9c86d0f2c4f28c03284a4cee2e36653000024f0b87d66c212e665e4c079e6abeac07844192cd38474240faac71fc50daf8a347819340885c80e746180193233afe36e07", 0xa7}, {&(0x7f00000001c0)="7f8ad6b4b932e7aa7d94c82af16c1739c3f6ef8cb84cbd0c1d1fabe8e85f9b6794d1d772c62f0b64c5b2143c11ce116acc332886b32ef768a3150998e70c8a43ae9ffe2a0adfa46979c6939b4a2a1d7cb02380577fb12d6faffaa33ca348403e829304a9e9bf809087bea8fe39dc62118d66e9be7870abea146ad1a29d3b70b52ecb857a58ba85690aec44530f24921f2ef4ff8d67265cabe2a0178dd85b17f5c2284e4182e3ff982917", 0xaa}, {&(0x7f0000000280)="57fc63bb2373fde22564f51592a3cc39a1ccfb0a86875ff4e474efd59871bd2416079161821fd66467a9b2cc0d85e4f4d150dd1cbb6c1c35ba20a193335318ff87452b03cb65087b0f54af", 0x4b}, {&(0x7f0000000300)="4cfde2401bfc63c8b9a9f6c0b80597c5c9e86695e18620565755c1114d6928254c74db2193d63be8b77a07ab1613ba3c107dcf23527af143c72fb9bbdc3353d5118e0ecf38fc98df9f7840a33ae76e5934c9c2212a1dc987b42cd11a1ad013cb49449146b6ac1651d15125d50e4922a3a5057a1bc3949eabafdff670a0d6f22758d68b0a09e394965ae4180f1193252c09229b72fbe3639ae7f8ea62b7a598426cc52e21670fd0ff0396df7448", 0xad}], 0x4)

07:45:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0)

07:45:19 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:19 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2428.590075] FAULT_INJECTION: forcing a failure.
[ 2428.590075] name failslab, interval 1, probability 0, space 0, times 0
[ 2428.592490] CPU: 0 PID: 14193 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2428.593888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2428.595563] Call Trace:
[ 2428.596110]  dump_stack+0x107/0x167
[ 2428.596861]  should_fail.cold+0x5/0xa
[ 2428.597639]  ? copy_process+0x5d2/0x7800
[ 2428.598462]  should_failslab+0x5/0x20
[ 2428.599228]  kmem_cache_alloc_node+0x55/0x330
[ 2428.600134]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2428.601220]  copy_process+0x5d2/0x7800
[ 2428.602015]  ? stack_trace_save+0x8c/0xc0
[ 2428.602853]  ? stack_trace_consume_entry+0x160/0x160
[ 2428.603895]  ? kasan_save_stack+0x32/0x40
[ 2428.604748]  ? kasan_save_stack+0x1b/0x40
[ 2428.605584]  ? create_io_worker+0xe8/0x620
[ 2428.606438]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2428.607282]  ? __cleanup_sighand+0xb0/0xb0
[ 2428.608135]  ? __lockdep_reset_lock+0x180/0x180
[ 2428.609077]  ? lock_acquire+0x197/0x470
[ 2428.609878]  ? create_object.isra.0+0x3ad/0xa20
[ 2428.610826]  ? lock_release+0x680/0x680
[ 2428.611625]  ? find_held_lock+0x2c/0x110
[ 2428.612463]  ? io_wqe_dec_running+0x220/0x220
[ 2428.613374]  create_io_thread+0xb6/0xf0
[ 2428.614178]  ? pidfd_pid+0x90/0x90
[ 2428.614894]  ? mark_held_locks+0x9e/0xe0
[ 2428.615720]  ? io_wqe_dec_running+0x220/0x220
[ 2428.616661]  ? __init_swait_queue_head+0xc6/0x150
[ 2428.617631]  create_io_worker+0x23a/0x620
[ 2428.618470]  io_wqe_enqueue+0x69e/0xbe0
[ 2428.619275]  ? create_worker_cb+0x260/0x260
[ 2428.620150]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2428.621065]  ? io_prep_async_work+0x34e/0x540
[ 2428.621975]  io_queue_async_work+0x26b/0x4f0
[ 2428.622872]  __io_queue_sqe+0x5cc/0x9d0
[ 2428.623687]  ? io_issue_sqe+0x7700/0x7700
[ 2428.624541]  ? io_poll_queue_proc+0x50/0x50
[ 2428.625417]  ? io_prep_rw+0x7f5/0x1050
[ 2428.626218]  io_submit_sqes+0x4461/0x85c0
[ 2428.627099]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2428.628115]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2428.629107]  ? lock_downgrade+0x6d0/0x6d0
[ 2428.629955]  ? find_held_lock+0x2c/0x110
[ 2428.630795]  ? io_submit_sqes+0x85c0/0x85c0
[ 2428.631682]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2428.632677]  ? wait_for_completion_io+0x270/0x270
[ 2428.633669]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2428.634606]  ? vfs_write+0x354/0xa70
[ 2428.635364]  ? fput_many+0x2f/0x1a0
[ 2428.636112]  ? ksys_write+0x1a9/0x260
[ 2428.636891]  ? __ia32_sys_read+0xb0/0xb0
[ 2428.637717]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2428.638771]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2428.639830]  do_syscall_64+0x33/0x40
[ 2428.640595]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2428.641634] RIP: 0033:0x7f5f670fdb19
[ 2428.642400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2428.646127] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2428.647674] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2428.649158] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2428.650585] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2428.652009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2428.653446] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:45:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)

07:45:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x80ffff, 0x0, 0x0, 0x0)

07:45:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0)

07:45:31 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x1f)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r3)
write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x126)
read(r3, 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:45:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:31 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, 0x0)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:45:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2441.029858] FAULT_INJECTION: forcing a failure.
[ 2441.029858] name failslab, interval 1, probability 0, space 0, times 0
[ 2441.032034] CPU: 1 PID: 14224 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2441.033082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2441.034324] Call Trace:
[ 2441.034731]  dump_stack+0x107/0x167
[ 2441.035291]  should_fail.cold+0x5/0xa
[ 2441.035873]  ? create_object.isra.0+0x3a/0xa20
[ 2441.036570]  should_failslab+0x5/0x20
[ 2441.037145]  kmem_cache_alloc+0x5b/0x310
[ 2441.037761]  create_object.isra.0+0x3a/0xa20
[ 2441.038420]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2441.039182]  kmem_cache_alloc_node+0x169/0x330
[ 2441.039907]  copy_process+0x5d2/0x7800
[ 2441.040526]  ? stack_trace_save+0x8c/0xc0
[ 2441.041159]  ? stack_trace_consume_entry+0x160/0x160
[ 2441.041928]  ? kasan_save_stack+0x32/0x40
[ 2441.042541]  ? kasan_save_stack+0x1b/0x40
[ 2441.043163]  ? create_io_worker+0xe8/0x620
[ 2441.043783]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2441.044403]  ? __cleanup_sighand+0xb0/0xb0
[ 2441.045059]  ? __lockdep_reset_lock+0x180/0x180
[ 2441.045770]  ? lock_acquire+0x197/0x470
[ 2441.046377]  ? create_object.isra.0+0x3ad/0xa20
[ 2441.047080]  ? lock_release+0x680/0x680
[ 2441.047673]  ? find_held_lock+0x2c/0x110
[ 2441.048283]  ? io_wqe_dec_running+0x220/0x220
[ 2441.048964]  create_io_thread+0xb6/0xf0
[ 2441.049553]  ? pidfd_pid+0x90/0x90
[ 2441.050092]  ? mark_held_locks+0x9e/0xe0
[ 2441.050702]  ? io_wqe_dec_running+0x220/0x220
[ 2441.051385]  ? __init_swait_queue_head+0xc6/0x150
[ 2441.052105]  create_io_worker+0x23a/0x620
07:45:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2441.052760]  io_wqe_enqueue+0x69e/0xbe0
[ 2441.053537]  ? create_worker_cb+0x260/0x260
[ 2441.054175]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2441.054839]  ? io_prep_async_work+0x34e/0x540
[ 2441.055514]  io_queue_async_work+0x26b/0x4f0
[ 2441.056175]  __io_queue_sqe+0x5cc/0x9d0
[ 2441.056786]  ? io_issue_sqe+0x7700/0x7700
[ 2441.057396]  ? io_poll_queue_proc+0x50/0x50
[ 2441.058040]  ? io_prep_rw+0x7f5/0x1050
[ 2441.058649]  io_submit_sqes+0x4461/0x85c0
[ 2441.059290]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2441.060025]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2441.060745]  ? lock_downgrade+0x6d0/0x6d0
[ 2441.061357]  ? find_held_lock+0x2c/0x110
[ 2441.061968]  ? io_submit_sqes+0x85c0/0x85c0
[ 2441.062626]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2441.063379]  ? wait_for_completion_io+0x270/0x270
[ 2441.064106]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2441.064801]  ? vfs_write+0x354/0xa70
[ 2441.065361]  ? fput_many+0x2f/0x1a0
[ 2441.065897]  ? ksys_write+0x1a9/0x260
[ 2441.066467]  ? __ia32_sys_read+0xb0/0xb0
[ 2441.067069]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2441.067846]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2441.068620]  do_syscall_64+0x33/0x40
[ 2441.069180]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2441.069947] RIP: 0033:0x7f5f670fdb19
[ 2441.070498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2441.073241] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2441.074362] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2441.075419] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2441.076482] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2441.077550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2441.078605] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2441.089932] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:31 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f00000003c0)={@val={0x0, 0x22eb}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @empty}}, 0x38)
r3 = signalfd(r0, &(0x7f0000000040)={[0x1352c975]}, 0x8)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000080))

07:45:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x59350000, 0x0, 0x0, 0x0)

07:45:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xc0ffff, 0x0, 0x0, 0x0)

07:45:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

07:45:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)

07:45:31 executing program 4:
r0 = fork()
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
readv(r2, &(0x7f0000000240)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000001c0)=""/71, 0x47}], 0x4)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)

[ 2441.302218] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2441.428077] FAULT_INJECTION: forcing a failure.
[ 2441.428077] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2441.430664] CPU: 0 PID: 14265 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2441.432054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2441.433786] Call Trace:
[ 2441.434329]  dump_stack+0x107/0x167
[ 2441.435097]  should_fail.cold+0x5/0xa
[ 2441.435892]  __alloc_pages_nodemask+0x182/0x600
[ 2441.436853]  ? lock_downgrade+0x6d0/0x6d0
[ 2441.437720]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2441.438961]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2441.440012]  ? kmem_cache_alloc_node+0x2bc/0x330
[ 2441.440997]  copy_process+0x618/0x7800
[ 2441.441819]  ? stack_trace_save+0x8c/0xc0
[ 2441.442687]  ? stack_trace_consume_entry+0x160/0x160
[ 2441.443738]  ? kasan_save_stack+0x32/0x40
[ 2441.444597]  ? kasan_save_stack+0x1b/0x40
[ 2441.445441]  ? create_io_worker+0xe8/0x620
[ 2441.446299]  ? io_wqe_enqueue+0x69e/0xbe0
[ 2441.447150]  ? __cleanup_sighand+0xb0/0xb0
[ 2441.448021]  ? __lockdep_reset_lock+0x180/0x180
[ 2441.448971]  ? lock_acquire+0x197/0x470
[ 2441.449780]  ? create_object.isra.0+0x3ad/0xa20
[ 2441.450736]  ? lock_release+0x680/0x680
[ 2441.451554]  ? find_held_lock+0x2c/0x110
[ 2441.452387]  ? io_wqe_dec_running+0x220/0x220
[ 2441.453323]  create_io_thread+0xb6/0xf0
[ 2441.454145]  ? pidfd_pid+0x90/0x90
[ 2441.454881]  ? mark_held_locks+0x9e/0xe0
[ 2441.455709]  ? io_wqe_dec_running+0x220/0x220
[ 2441.456677]  ? __init_swait_queue_head+0xc6/0x150
[ 2441.457661]  create_io_worker+0x23a/0x620
[ 2441.458528]  io_wqe_enqueue+0x69e/0xbe0
[ 2441.459336]  ? create_worker_cb+0x260/0x260
[ 2441.460210]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2441.461132]  ? io_prep_async_work+0x34e/0x540
[ 2441.462049]  io_queue_async_work+0x26b/0x4f0
[ 2441.462946]  __io_queue_sqe+0x5cc/0x9d0
[ 2441.463760]  ? io_issue_sqe+0x7700/0x7700
[ 2441.464605]  ? io_poll_queue_proc+0x50/0x50
[ 2441.465481]  ? io_prep_rw+0x7f5/0x1050
[ 2441.466278]  io_submit_sqes+0x4461/0x85c0
[ 2441.467153]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2441.468160]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2441.469159]  ? lock_downgrade+0x6d0/0x6d0
[ 2441.469996]  ? find_held_lock+0x2c/0x110
[ 2441.470826]  ? io_submit_sqes+0x85c0/0x85c0
[ 2441.471711]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2441.472706]  ? wait_for_completion_io+0x270/0x270
[ 2441.473690]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2441.474631]  ? vfs_write+0x354/0xa70
[ 2441.475391]  ? fput_many+0x2f/0x1a0
[ 2441.476133]  ? ksys_write+0x1a9/0x260
[ 2441.476912]  ? __ia32_sys_read+0xb0/0xb0
[ 2441.477740]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2441.478796]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2441.479845]  do_syscall_64+0x33/0x40
[ 2441.480618]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2441.481655] RIP: 0033:0x7f5f670fdb19
[ 2441.482412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2441.486119] RSP: 002b:00007f5f64652188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2441.487661] RAX: ffffffffffffffda RBX: 00007f5f67211020 RCX: 00007f5f670fdb19
[ 2441.489122] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003
[ 2441.490566] RBP: 00007f5f646521d0 R08: 0000000000000000 R09: 0000000000000000
[ 2441.492007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2441.493453] R13: 00007ffee1d988cf R14: 00007f5f64652300 R15: 0000000000022000
07:45:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

07:45:47 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:45:47 executing program 4:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xb58, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, r0, 0x2, 0xffffffffffffffff, 0x8)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000056a88853c92c199d554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196c"], 0x2a)

07:45:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)

07:45:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x87020000, 0x0, 0x0, 0x0)

07:45:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2456.875066] FAULT_INJECTION: forcing a failure.
[ 2456.875066] name failslab, interval 1, probability 0, space 0, times 0
[ 2456.876843] CPU: 1 PID: 14284 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2456.877580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2456.878402] Call Trace:
[ 2456.878696]  dump_stack+0x107/0x167
[ 2456.879080]  should_fail.cold+0x5/0xa
[ 2456.879485]  ? __delayacct_tsk_init+0x1b/0x80
[ 2456.879963]  ? __delayacct_tsk_init+0x1b/0x80
[ 2456.880439]  should_failslab+0x5/0x20
[ 2456.880859]  kmem_cache_alloc+0x5b/0x310
[ 2456.881295]  __delayacct_tsk_init+0x1b/0x80
[ 2456.881759]  copy_process+0x3319/0x7800
07:45:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0)

07:45:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2456.882314]  ? stack_trace_save+0x8c/0xc0
[ 2456.882824]  ? stack_trace_consume_entry+0x160/0x160
[ 2456.883368]  ? kasan_save_stack+0x1b/0x40
[ 2456.883841]  ? __cleanup_sighand+0xb0/0xb0
[ 2456.884282]  ? __lockdep_reset_lock+0x180/0x180
[ 2456.884784]  ? lock_acquire+0x197/0x470
[ 2456.885205]  ? create_object.isra.0+0x3ad/0xa20
[ 2456.885705]  ? lock_release+0x680/0x680
[ 2456.886131]  ? find_held_lock+0x2c/0x110
[ 2456.886575]  ? io_wqe_dec_running+0x220/0x220
[ 2456.887045]  create_io_thread+0xb6/0xf0
[ 2456.887441]  ? pidfd_pid+0x90/0x90
[ 2456.887825]  ? mark_held_locks+0x9e/0xe0
[ 2456.888269]  ? io_wqe_dec_running+0x220/0x220
[ 2456.888769]  ? __init_swait_queue_head+0xc6/0x150
[ 2456.889291]  create_io_worker+0x23a/0x620
[ 2456.889738]  io_wqe_enqueue+0x69e/0xbe0
[ 2456.890149]  ? create_worker_cb+0x260/0x260
[ 2456.890608]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2456.891089]  ? io_prep_async_work+0x34e/0x540
[ 2456.891566]  io_queue_async_work+0x26b/0x4f0
[ 2456.892032]  __io_queue_sqe+0x5cc/0x9d0
[ 2456.892458]  ? io_issue_sqe+0x7700/0x7700
[ 2456.892886]  ? io_poll_queue_proc+0x50/0x50
[ 2456.893349]  ? io_prep_rw+0x7f5/0x1050
[ 2456.893766]  io_submit_sqes+0x4461/0x85c0
[ 2456.894229]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2456.894748]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2456.895259]  ? lock_downgrade+0x6d0/0x6d0
[ 2456.895700]  ? find_held_lock+0x2c/0x110
[ 2456.896135]  ? io_submit_sqes+0x85c0/0x85c0
[ 2456.896599]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2456.897090]  ? wait_for_completion_io+0x270/0x270
[ 2456.897603]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2456.898100]  ? vfs_write+0x354/0xa70
[ 2456.898479]  ? fput_many+0x2f/0x1a0
[ 2456.898868]  ? ksys_write+0x1a9/0x260
[ 2456.899270]  ? __ia32_sys_read+0xb0/0xb0
[ 2456.899705]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2456.900259]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2456.900822]  do_syscall_64+0x33/0x40
[ 2456.901217]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2456.901760] RIP: 0033:0x7f5f670fdb19
[ 2456.902163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2456.904082] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2456.904897] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2456.905647] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2456.906391] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2456.907111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2456.907860] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2456.926112] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:45:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:45:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x29789b4a, 0x0, {0x1, 0x0, 0x0, 0x1, 0xff}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000001c0)={0x800, 0x30, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54360eb644b23b062706cea2196cf561fb42e865830b"], 0x2a)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000001380)={0x53, 0xffffffffffffffff, 0x7, 0x0, @buffer={0x0, 0xfb, &(0x7f0000000200)=""/251}, &(0x7f0000000300)="a8b882c4277ad1", &(0x7f0000000340)=""/4096, 0xd97, 0x0, 0x2, &(0x7f0000001340)})

07:45:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00), 0x0, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:45:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x0, 0x0, 0x0, 0x0, 0x0)

07:45:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0)

07:45:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xc00c0000, 0x0, 0x0, 0x0)

[ 2457.098188] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:46:02 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:46:02 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:46:02 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)

07:46:02 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0)

07:46:02 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0)

07:46:02 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x7a, 0xffffffffffffffff, 0x80, 0x6, @buffer={0x0, 0x52, &(0x7f0000000080)=""/82}, &(0x7f00000001c0)="e93db3abd0cc7b0e00dfd4cadaf9858e2e0f1c524be2af01e945d2b1d7b9b3def2c0b1de6fdd44e88d53df4bbae011a420b93dcb47156224ac4e99229a03950ff46bcdffbadb4293ee78dd465af1943df25338982c1d750e90ca1a8b3835203a3feb3722a034c61df832bb4812846d469a3685629477a50cfd797d7c5121f34a", &(0x7f0000000100)=""/45, 0xe6, 0x10005, 0x2, &(0x7f0000000240)})
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
openat(r1, &(0x7f0000000300)='./file0\x00', 0x208400, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040))

07:46:02 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:46:02 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

[ 2472.210578] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2472.222030] FAULT_INJECTION: forcing a failure.
[ 2472.222030] name failslab, interval 1, probability 0, space 0, times 0
[ 2472.225020] CPU: 0 PID: 14339 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2472.226425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2472.228097] Call Trace:
[ 2472.228644]  dump_stack+0x107/0x167
[ 2472.229401]  should_fail.cold+0x5/0xa
[ 2472.230190]  should_failslab+0x5/0x20
[ 2472.230970]  kmem_cache_alloc_bulk+0x4b/0x320
[ 2472.231900]  io_submit_sqes+0x6f76/0x85c0
[ 2472.232763]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2472.233798]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2472.234823]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2472.235824]  ? lock_downgrade+0x6d0/0x6d0
[ 2472.236676]  ? find_held_lock+0x2c/0x110
[ 2472.237538]  ? io_submit_sqes+0x85c0/0x85c0
[ 2472.238440]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2472.239435]  ? wait_for_completion_io+0x270/0x270
[ 2472.240422]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2472.241369]  ? vfs_write+0x354/0xa70
[ 2472.242123]  ? fput_many+0x2f/0x1a0
[ 2472.242863]  ? ksys_write+0x1a9/0x260
[ 2472.243638]  ? __ia32_sys_read+0xb0/0xb0
[ 2472.244463]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2472.245538]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2472.246591]  do_syscall_64+0x33/0x40
[ 2472.247352]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2472.248370] FAULT_INJECTION: forcing a failure.
[ 2472.248370] name failslab, interval 1, probability 0, space 0, times 0
[ 2472.248395] RIP: 0033:0x7f05f7ac5b19
[ 2472.248419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2472.254111] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2472.255653] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2472.257102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2472.258542] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2472.259985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2472.261436] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2472.262909] CPU: 1 PID: 14340 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2472.263727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2472.264619] Call Trace:
[ 2472.264980]  dump_stack+0x107/0x167
[ 2472.265404]  should_fail.cold+0x5/0xa
[ 2472.265864]  ? create_object.isra.0+0x3a/0xa20
[ 2472.266396]  should_failslab+0x5/0x20
[ 2472.266847]  kmem_cache_alloc+0x5b/0x310
[ 2472.267316]  create_object.isra.0+0x3a/0xa20
[ 2472.267820]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2472.268403]  kmem_cache_alloc+0x159/0x310
[ 2472.268912]  __delayacct_tsk_init+0x1b/0x80
[ 2472.269413]  copy_process+0x3319/0x7800
[ 2472.269881]  ? stack_trace_save+0x8c/0xc0
[ 2472.270366]  ? stack_trace_consume_entry+0x160/0x160
[ 2472.270915]  ? kasan_save_stack+0x1b/0x40
[ 2472.271407]  ? __cleanup_sighand+0xb0/0xb0
[ 2472.271907]  ? __lockdep_reset_lock+0x180/0x180
[ 2472.272440]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2472.273074]  ? io_wqe_dec_running+0x220/0x220
[ 2472.273592]  create_io_thread+0xb6/0xf0
[ 2472.274057]  ? pidfd_pid+0x90/0x90
[ 2472.274482]  ? io_wqe_dec_running+0x220/0x220
[ 2472.275028]  ? __init_swait_queue_head+0xc6/0x150
[ 2472.275595]  create_io_worker+0x23a/0x620
[ 2472.276050]  io_wqe_enqueue+0x69e/0xbe0
[ 2472.276529]  ? create_worker_cb+0x260/0x260
[ 2472.277058]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2472.277597]  ? io_prep_async_work+0x34e/0x540
[ 2472.278134]  io_queue_async_work+0x26b/0x4f0
[ 2472.278654]  __io_queue_sqe+0x5cc/0x9d0
[ 2472.279120]  ? io_issue_sqe+0x7700/0x7700
[ 2472.279598]  ? io_poll_queue_proc+0x50/0x50
[ 2472.280066]  ? io_prep_rw+0x7f5/0x1050
[ 2472.280521]  io_submit_sqes+0x4461/0x85c0
[ 2472.280552]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2472.280562]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2472.280575]  ? lock_downgrade+0x6d0/0x6d0
[ 2472.280584]  ? find_held_lock+0x2c/0x110
[ 2472.280598]  ? io_submit_sqes+0x85c0/0x85c0
[ 2472.280614]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2472.280627]  ? wait_for_completion_io+0x270/0x270
[ 2472.280641]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2472.280650]  ? vfs_write+0x354/0xa70
[ 2472.280663]  ? fput_many+0x2f/0x1a0
[ 2472.280675]  ? ksys_write+0x1a9/0x260
07:46:02 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffc, 0x55, 0x6, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/248, 0xf8}]}, &(0x7f00000002c0)="d59afcf361057065e98242b8c5c8c999cfde054ca8f4e2389f28b332842c58b7214570da96c221381168d7b782d35af55b3971cb3523aa84b3d8a12a9c0c4bc8db33fdf1346113f0a8474b120912bcfc221f1d5add", &(0x7f0000000340)=""/169, 0x10000, 0x20, 0x1, &(0x7f0000000100)})
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800000000554e6c54360eb64466cb2a909b6a7fd98b4301000000000000006cf561fb42e86583b5"], 0x2a)
r4 = gettid()
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x1, 0x4, 0x7, 0x0, 0x0, 0x9002, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xff, 0x8}, 0x42008, 0x2, 0x5, 0x1, 0xe368, 0x7f, 0x8, 0x0, 0x463db580, 0x0, 0xffffffffffffffff}, r4, 0xf, 0xffffffffffffffff, 0x1)

[ 2472.280685]  ? __ia32_sys_read+0xb0/0xb0
07:46:02 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2472.280699]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2472.280709]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2472.280724]  do_syscall_64+0x33/0x40
[ 2472.280735]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
07:46:02 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x15020000, 0x0, 0x0, 0x0)

[ 2472.280743] RIP: 0033:0x7f5f670fdb19
[ 2472.280753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2472.280760] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2472.280772] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2472.280778] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2472.280784] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2472.280791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2472.280815] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2472.366104] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2472.367209] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0xd5 (vendor)
[ 2472.367864] sd 0:0:0:0: [sg0] tag#0 CDB[00]: d5 9a fc f3 61 05 70 65 e9 82 42 b8 c5 c8 c9 99
[ 2472.368785] sd 0:0:0:0: [sg0] tag#0 CDB[10]: cf de 05 4c a8 f4 e2 38 9f 28 b3 32 84 2c 58 b7
[ 2472.369725] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 21 45 70 da 96 c2 21 38 11 68 d7 b7 82 d3 5a f5
[ 2472.370650] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 5b 39 71 cb 35 23 aa 84 b3 d8 a1 2a 9c 0c 4b c8
[ 2472.371598] sd 0:0:0:0: [sg0] tag#0 CDB[40]: db 33 fd f1 34 61 13 f0 a8 47 4b 12 09 12 bc fc
[ 2472.372535] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 22 1f 1d 5a dd
[ 2472.378003] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 2472.379094] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0xd5 (vendor)
[ 2472.379772] sd 0:0:0:0: [sg0] tag#0 CDB[00]: d5 9a fc f3 61 05 70 65 e9 82 42 b8 c5 c8 c9 99
[ 2472.380703] sd 0:0:0:0: [sg0] tag#0 CDB[10]: cf de 05 4c a8 f4 e2 38 9f 28 b3 32 84 2c 58 b7
[ 2472.381663] sd 0:0:0:0: [sg0] tag#0 CDB[20]: 21 45 70 da 96 c2 21 38 11 68 d7 b7 82 d3 5a f5
[ 2472.382600] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 5b 39 71 cb 35 23 aa 84 b3 d8 a1 2a 9c 0c 4b c8
[ 2472.383526] sd 0:0:0:0: [sg0] tag#0 CDB[40]: db 33 fd f1 34 61 13 f0 a8 47 4b 12 09 12 bc fc
[ 2472.384438] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 22 1f 1d 5a dd
07:46:15 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:46:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0)

07:46:15 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$FICLONE(r3, 0x40049409, r0)

07:46:15 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)

07:46:15 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:46:15 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

07:46:15 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:46:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2485.047948] FAULT_INJECTION: forcing a failure.
[ 2485.047948] name failslab, interval 1, probability 0, space 0, times 0
[ 2485.050919] CPU: 0 PID: 14369 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2485.052318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2485.054005] Call Trace:
[ 2485.054545]  dump_stack+0x107/0x167
[ 2485.055288]  should_fail.cold+0x5/0xa
[ 2485.056061]  ? alloc_pid+0xd7/0xd30
[ 2485.056799]  should_failslab+0x5/0x20
[ 2485.057583]  kmem_cache_alloc+0x5b/0x310
[ 2485.058420]  alloc_pid+0xd7/0xd30
[ 2485.059146]  copy_process+0x3a8e/0x7800
[ 2485.059960]  ? stack_trace_save+0x8c/0xc0
[ 2485.060802]  ? stack_trace_consume_entry+0x160/0x160
[ 2485.061888]  ? __cleanup_sighand+0xb0/0xb0
[ 2485.062757]  ? __lockdep_reset_lock+0x180/0x180
[ 2485.063712]  ? lock_acquire+0x197/0x470
[ 2485.064509]  ? create_object.isra.0+0x3ad/0xa20
[ 2485.065501]  ? lock_release+0x680/0x680
[ 2485.066299]  ? find_held_lock+0x2c/0x110
[ 2485.067123]  ? io_wqe_dec_running+0x220/0x220
[ 2485.068039]  create_io_thread+0xb6/0xf0
[ 2485.068855]  ? pidfd_pid+0x90/0x90
[ 2485.069589]  ? mark_held_locks+0x9e/0xe0
[ 2485.070428]  ? io_wqe_dec_running+0x220/0x220
[ 2485.071359]  ? __init_swait_queue_head+0xc6/0x150
[ 2485.072347]  create_io_worker+0x23a/0x620
[ 2485.073217]  io_wqe_enqueue+0x69e/0xbe0
[ 2485.074053]  ? create_worker_cb+0x260/0x260
[ 2485.074074]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2485.074100]  ? io_prep_async_work+0x34e/0x540
[ 2485.074128]  io_queue_async_work+0x26b/0x4f0
[ 2485.074156]  __io_queue_sqe+0x5cc/0x9d0
[ 2485.074183]  ? io_issue_sqe+0x7700/0x7700
[ 2485.074202]  ? io_poll_queue_proc+0x50/0x50
[ 2485.074225]  ? io_prep_rw+0x7f5/0x1050
[ 2485.074252]  io_submit_sqes+0x4461/0x85c0
07:46:15 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2485.074307]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.074324]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.074349]  ? lock_downgrade+0x6d0/0x6d0
[ 2485.074365]  ? find_held_lock+0x2c/0x110
[ 2485.074390]  ? io_submit_sqes+0x85c0/0x85c0
[ 2485.074418]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2485.074442]  ? wait_for_completion_io+0x270/0x270
[ 2485.074465]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2485.074482]  ? vfs_write+0x354/0xa70
07:46:15 executing program 4:
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2485.074505]  ? fput_many+0x2f/0x1a0
[ 2485.074525]  ? ksys_write+0x1a9/0x260
07:46:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:46:15 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)

[ 2485.074545]  ? __ia32_sys_read+0xb0/0xb0
[ 2485.074570]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2485.074587]  ? syscall_enter_from_user_mode+0x1d/0x50
07:46:15 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0)

[ 2485.074613]  do_syscall_64+0x33/0x40
[ 2485.074635]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
07:46:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0)

[ 2485.074647] RIP: 0033:0x7f5f670fdb19
07:46:15 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2485.074667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2485.074678] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2485.074700] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2485.074712] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2485.074723] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2485.074734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
07:46:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

07:46:15 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)

[ 2485.074745] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2485.122036] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2485.241386] FAULT_INJECTION: forcing a failure.
[ 2485.241386] name failslab, interval 1, probability 0, space 0, times 0
[ 2485.241415] CPU: 0 PID: 14389 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2485.241429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
07:46:15 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0)

[ 2485.241436] Call Trace:
[ 2485.241470]  dump_stack+0x107/0x167
[ 2485.241495]  should_fail.cold+0x5/0xa
[ 2485.241517]  ? create_object.isra.0+0x3a/0xa20
[ 2485.241539]  should_failslab+0x5/0x20
[ 2485.241558]  kmem_cache_alloc+0x5b/0x310
[ 2485.241584]  create_object.isra.0+0x3a/0xa20
[ 2485.241606]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2485.241636]  kmem_cache_alloc_bulk+0x168/0x320
[ 2485.241665]  io_submit_sqes+0x6f76/0x85c0
[ 2485.241694]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2485.241750]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.241774]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.241808]  ? lock_downgrade+0x6d0/0x6d0
[ 2485.241829]  ? find_held_lock+0x2c/0x110
[ 2485.241863]  ? io_submit_sqes+0x85c0/0x85c0
[ 2485.241897]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2485.241922]  ? wait_for_completion_io+0x270/0x270
[ 2485.241946]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2485.241962]  ? vfs_write+0x354/0xa70
[ 2485.241986]  ? fput_many+0x2f/0x1a0
[ 2485.242006]  ? ksys_write+0x1a9/0x260
[ 2485.242025]  ? __ia32_sys_read+0xb0/0xb0
[ 2485.242050]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2485.242068]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2485.242094]  do_syscall_64+0x33/0x40
[ 2485.242115]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2485.242128] RIP: 0033:0x7f05f7ac5b19
[ 2485.242148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2485.242158] RSP: 002b:00007f05f501a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2485.242180] RAX: ffffffffffffffda RBX: 00007f05f7bd9020 RCX: 00007f05f7ac5b19
[ 2485.242191] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2485.242202] RBP: 00007f05f501a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2485.242213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2485.242224] R13: 00007fff977b440f R14: 00007f05f501a300 R15: 0000000000022000
[ 2485.273449] FAULT_INJECTION: forcing a failure.
[ 2485.273449] name failslab, interval 1, probability 0, space 0, times 0
[ 2485.273855] CPU: 0 PID: 14403 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2485.273866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2485.273872] Call Trace:
[ 2485.273900]  dump_stack+0x107/0x167
[ 2485.273928]  should_fail.cold+0x5/0xa
[ 2485.273950]  ? create_object.isra.0+0x3a/0xa20
[ 2485.273973]  should_failslab+0x5/0x20
[ 2485.273990]  kmem_cache_alloc+0x5b/0x310
[ 2485.274017]  create_object.isra.0+0x3a/0xa20
[ 2485.274036]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2485.274062]  kmem_cache_alloc+0x159/0x310
[ 2485.274091]  alloc_pid+0xd7/0xd30
[ 2485.274126]  copy_process+0x3a8e/0x7800
[ 2485.274150]  ? stack_trace_save+0x8c/0xc0
[ 2485.274171]  ? stack_trace_consume_entry+0x160/0x160
[ 2485.274219]  ? __cleanup_sighand+0xb0/0xb0
[ 2485.274239]  ? __lockdep_reset_lock+0x180/0x180
[ 2485.274257]  ? lock_acquire+0x197/0x470
[ 2485.274274]  ? create_object.isra.0+0x3ad/0xa20
[ 2485.274298]  ? lock_release+0x680/0x680
[ 2485.274315]  ? find_held_lock+0x2c/0x110
[ 2485.274343]  ? io_wqe_dec_running+0x220/0x220
[ 2485.274363]  create_io_thread+0xb6/0xf0
[ 2485.274383]  ? pidfd_pid+0x90/0x90
[ 2485.274402]  ? mark_held_locks+0x9e/0xe0
[ 2485.274426]  ? io_wqe_dec_running+0x220/0x220
[ 2485.274461]  ? __init_swait_queue_head+0xc6/0x150
[ 2485.274485]  create_io_worker+0x23a/0x620
[ 2485.274509]  io_wqe_enqueue+0x69e/0xbe0
[ 2485.274534]  ? create_worker_cb+0x260/0x260
[ 2485.274555]  ? _raw_spin_unlock_irq+0x1f/0x30
[ 2485.274581]  ? io_prep_async_work+0x34e/0x540
[ 2485.274609]  io_queue_async_work+0x26b/0x4f0
[ 2485.274637]  __io_queue_sqe+0x5cc/0x9d0
[ 2485.274663]  ? io_issue_sqe+0x7700/0x7700
[ 2485.274682]  ? io_poll_queue_proc+0x50/0x50
[ 2485.274706]  ? io_prep_rw+0x7f5/0x1050
[ 2485.274732]  io_submit_sqes+0x4461/0x85c0
[ 2485.274787]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.274805]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2485.274830]  ? lock_downgrade+0x6d0/0x6d0
[ 2485.274845]  ? find_held_lock+0x2c/0x110
[ 2485.274871]  ? io_submit_sqes+0x85c0/0x85c0
[ 2485.274899]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2485.274924]  ? wait_for_completion_io+0x270/0x270
[ 2485.274946]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2485.274962]  ? vfs_write+0x354/0xa70
[ 2485.274986]  ? fput_many+0x2f/0x1a0
[ 2485.275006]  ? ksys_write+0x1a9/0x260
[ 2485.275025]  ? __ia32_sys_read+0xb0/0xb0
[ 2485.275050]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2485.275067]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2485.275094]  do_syscall_64+0x33/0x40
[ 2485.275115]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2485.275127] RIP: 0033:0x7f5f670fdb19
[ 2485.275147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2485.275158] RSP: 002b:00007f5f64673188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2485.275180] RAX: ffffffffffffffda RBX: 00007f5f67210f60 RCX: 00007f5f670fdb19
[ 2485.275191] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005
[ 2485.275202] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2485.275213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2485.275224] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
[ 2485.327257] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2485.460159] FAULT_INJECTION: forcing a failure.
[ 2485.460159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2485.561459] CPU: 0 PID: 14418 Comm: syz-executor.1 Not tainted 5.10.194 #1
[ 2485.562864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2485.564546] Call Trace:
[ 2485.565110]  dump_stack+0x107/0x167
[ 2485.565859]  should_fail.cold+0x5/0xa
[ 2485.566637]  _copy_to_user+0x2e/0x180
[ 2485.567420]  simple_read_from_buffer+0xcc/0x160
[ 2485.568378]  proc_fail_nth_read+0x198/0x230
[ 2485.569267]  ? proc_sessionid_read+0x230/0x230
[ 2485.570191]  ? security_file_permission+0x24e/0x570
[ 2485.571208]  ? perf_trace_initcall_start+0x101/0x380
[ 2485.572259]  ? proc_sessionid_read+0x230/0x230
[ 2485.573201]  vfs_read+0x228/0x580
[ 2485.573915]  ksys_read+0x12d/0x260
[ 2485.574635]  ? vfs_write+0xa70/0xa70
[ 2485.575395]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2485.576461]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2485.577520]  do_syscall_64+0x33/0x40
[ 2485.578280]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2485.579325] RIP: 0033:0x7f5f670b069c
[ 2485.580081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2485.583795] RSP: 002b:00007f5f64673170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2485.585330] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f5f670b069c
[ 2485.586750] RDX: 000000000000000f RSI: 00007f5f646731e0 RDI: 0000000000000007
[ 2485.588184] RBP: 00007f5f646731d0 R08: 0000000000000000 R09: 0000000000000000
[ 2485.589626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2485.591068] R13: 00007ffee1d988cf R14: 00007f5f64673300 R15: 0000000000022000
07:46:29 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:46:29 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:46:29 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:46:29 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x64350000, 0x0, 0x0, 0x0)

07:46:29 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0)

07:46:29 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x349)
r2 = syz_open_dev$sg(&(0x7f0000000240), 0xf52, 0x248503)
r3 = dup(r2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x100006, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0, <r5=>0x0})
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000180)='system_u:object_r:klogd_var_run_t:s0\x00', 0x25)
getpgid(r5)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r6)
write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0x126)
read(r6, 0x0, 0x0)
kcmp(r4, r5, 0x6, r3, r6)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x126)
read(r2, 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040))

07:46:29 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

07:46:29 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)

[ 2499.506424] FAULT_INJECTION: forcing a failure.
[ 2499.506424] name failslab, interval 1, probability 0, space 0, times 0
[ 2499.509238] CPU: 0 PID: 14445 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2499.510652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2499.512361] Call Trace:
[ 2499.512917]  dump_stack+0x107/0x167
[ 2499.513681]  should_fail.cold+0x5/0xa
[ 2499.514466]  ? create_object.isra.0+0x3a/0xa20
[ 2499.515404]  should_failslab+0x5/0x20
[ 2499.516193]  kmem_cache_alloc+0x5b/0x310
[ 2499.517028]  ? mark_held_locks+0x9e/0xe0
[ 2499.517888]  create_object.isra.0+0x3a/0xa20
[ 2499.518786]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2499.519827]  kmem_cache_alloc_bulk+0x168/0x320
[ 2499.520768]  io_submit_sqes+0x6f76/0x85c0
[ 2499.521630]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2499.522640]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2499.523650]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2499.524639]  ? lock_downgrade+0x6d0/0x6d0
[ 2499.525496]  ? find_held_lock+0x2c/0x110
[ 2499.526341]  ? io_submit_sqes+0x85c0/0x85c0
[ 2499.527224]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2499.528210]  ? wait_for_completion_io+0x270/0x270
[ 2499.529208]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2499.530152]  ? vfs_write+0x354/0xa70
[ 2499.530913]  ? fput_many+0x2f/0x1a0
[ 2499.531661]  ? ksys_write+0x1a9/0x260
[ 2499.532459]  ? __ia32_sys_read+0xb0/0xb0
[ 2499.533298]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2499.534367]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2499.535433]  do_syscall_64+0x33/0x40
[ 2499.536199]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2499.537265] RIP: 0033:0x7f05f7ac5b19
[ 2499.538028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2499.541767] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2499.543336] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2499.544798] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2499.546271] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2499.547752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2499.549249] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2499.616760] ISOFS: Logical zone size(0) < hardware blocksize(1024)
07:46:30 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0)

07:46:45 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

07:46:45 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)

07:46:45 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x287, 0x0, 0x0)

07:46:45 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:46:45 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r3)
write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x126)
read(r3, 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0xffff)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040), &(0x7f0000000b40)={'enc=', 'raw', ' hash=', {'sha1-ssse3\x00'}}, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000740)=""/216, 0xd8}], 0x1)
fcntl$getown(0xffffffffffffffff, 0x9)
getpgid(0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x96)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
clone3(&(0x7f0000000400)={0x10200200, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x13}, &(0x7f0000000240)=""/69, 0x4e, 0x0, &(0x7f0000000100), 0x4000000000000154, {r2}}, 0x58)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:46:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:46:45 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xc00c0000, 0x0, 0x0, 0x0)

07:46:45 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2514.929469] FAULT_INJECTION: forcing a failure.
[ 2514.929469] name failslab, interval 1, probability 0, space 0, times 0
[ 2514.932685] CPU: 0 PID: 14476 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2514.934101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2514.935779] Call Trace:
[ 2514.936328]  dump_stack+0x107/0x167
[ 2514.937080]  should_fail.cold+0x5/0xa
[ 2514.937870]  ? create_object.isra.0+0x3a/0xa20
[ 2514.938804]  should_failslab+0x5/0x20
[ 2514.939585]  kmem_cache_alloc+0x5b/0x310
[ 2514.940410]  ? mark_held_locks+0x9e/0xe0
[ 2514.941238]  create_object.isra.0+0x3a/0xa20
[ 2514.942151]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2514.943187]  kmem_cache_alloc_bulk+0x168/0x320
[ 2514.944136]  io_submit_sqes+0x6f76/0x85c0
[ 2514.944984]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2514.946010]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2514.947023]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2514.948000]  ? lock_downgrade+0x6d0/0x6d0
[ 2514.948834]  ? find_held_lock+0x2c/0x110
[ 2514.949687]  ? io_submit_sqes+0x85c0/0x85c0
[ 2514.950569]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2514.951564]  ? wait_for_completion_io+0x270/0x270
[ 2514.952550]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2514.953495]  ? vfs_write+0x354/0xa70
[ 2514.954250]  ? fput_many+0x2f/0x1a0
[ 2514.954990]  ? ksys_write+0x1a9/0x260
[ 2514.955761]  ? __ia32_sys_read+0xb0/0xb0
[ 2514.956589]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2514.957658]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2514.958706]  do_syscall_64+0x33/0x40
[ 2514.959457]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2514.960489] RIP: 0033:0x7f05f7ac5b19
[ 2514.961255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2514.964956] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2514.966502] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2514.967937] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2514.969392] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2514.970836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2514.972269] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2514.975241] ISOFS: Logical zone size(0) < hardware blocksize(1024)
07:46:45 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:46:45 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

07:46:45 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0)

07:46:45 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0)

07:46:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x2, 0x0, 0x0, 0x0)

07:46:45 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500"/120, 0x78, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:46:45 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)

[ 2515.199097] ISOFS: Logical zone size(0) < hardware blocksize(1024)
07:46:45 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2515.306123] FAULT_INJECTION: forcing a failure.
[ 2515.306123] name failslab, interval 1, probability 0, space 0, times 0
[ 2515.308744] CPU: 0 PID: 14526 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2515.310170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2515.311850] Call Trace:
[ 2515.312400]  dump_stack+0x107/0x167
[ 2515.313177]  should_fail.cold+0x5/0xa
[ 2515.313995]  ? create_object.isra.0+0x3a/0xa20
[ 2515.314955]  should_failslab+0x5/0x20
[ 2515.315753]  kmem_cache_alloc+0x5b/0x310
[ 2515.316603]  ? mark_held_locks+0x9e/0xe0
[ 2515.317462]  create_object.isra.0+0x3a/0xa20
[ 2515.318366]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2515.319406]  kmem_cache_alloc_bulk+0x168/0x320
[ 2515.320342]  io_submit_sqes+0x6f76/0x85c0
[ 2515.321193]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2515.322224]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2515.323240]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2515.324236]  ? lock_downgrade+0x6d0/0x6d0
[ 2515.325070]  ? find_held_lock+0x2c/0x110
[ 2515.325903]  ? io_submit_sqes+0x85c0/0x85c0
[ 2515.326792]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2515.327787]  ? wait_for_completion_io+0x270/0x270
[ 2515.328760]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2515.329719]  ? vfs_write+0x354/0xa70
[ 2515.330480]  ? fput_many+0x2f/0x1a0
[ 2515.331231]  ? ksys_write+0x1a9/0x260
[ 2515.332003]  ? __ia32_sys_read+0xb0/0xb0
[ 2515.332833]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2515.333910]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2515.334951]  do_syscall_64+0x33/0x40
[ 2515.335706]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2515.336733] RIP: 0033:0x7f05f7ac5b19
[ 2515.337491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2515.341180] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2515.342719] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2515.344156] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2515.345618] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2515.347055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2515.348486] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:46:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x5, 0x0, 0x0, 0x0)

07:46:45 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xcc0, 0x0, 0x0)

07:46:45 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xffff8000, 0x0, 0x0, 0x0)

07:46:59 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:46:59 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:46:59 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

07:46:59 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x8, 0x0, 0x0, 0x0)

07:46:59 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

07:46:59 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r3)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x94, 0xff, @buffer={0x0, 0x78, &(0x7f0000000040)=""/120}, &(0x7f00000001c0)="7b638bc2d405e23577a3f6c1eb2029e37cb2e3d030c56e904e0e5236afe92e7d32951bcb364c193458a31e91bea80f6b395438da3dd2582c47c6e3ab851616f1da31d1f6dbe363c2d1b4dc00db06443a1a63fa7d218dd4a3821534752d988c9ca3a26c9b968ca8a66f98634480c350628e317f096caa973db02b5aad1daf0895bf9c21562945e1180c41de88db16cfe0b6d50fc7", &(0x7f0000000280)=""/255, 0x5, 0x83f0aa39937360b8, 0xffffffffffffffff, &(0x7f00000000c0)})
write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x126)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000100))
read(r3, 0x0, 0x0)
r4 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r4, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:46:59 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:46:59 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xffffc000, 0x0, 0x0, 0x0)

[ 2529.447370] FAULT_INJECTION: forcing a failure.
[ 2529.447370] name failslab, interval 1, probability 0, space 0, times 0
[ 2529.448829] CPU: 1 PID: 14550 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2529.449583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2529.450457] Call Trace:
[ 2529.450770]  dump_stack+0x107/0x167
[ 2529.451162]  should_fail.cold+0x5/0xa
[ 2529.451575]  ? create_object.isra.0+0x3a/0xa20
[ 2529.452071]  should_failslab+0x5/0x20
[ 2529.452493]  kmem_cache_alloc+0x5b/0x310
[ 2529.452942]  ? mark_held_locks+0x9e/0xe0
[ 2529.453383]  create_object.isra.0+0x3a/0xa20
[ 2529.453890]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2529.454442]  kmem_cache_alloc_bulk+0x168/0x320
[ 2529.454943]  io_submit_sqes+0x6f76/0x85c0
[ 2529.455386]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2529.455416]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2529.457031]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2529.457553]  ? lock_downgrade+0x6d0/0x6d0
[ 2529.457990]  ? find_held_lock+0x2c/0x110
[ 2529.458431]  ? io_submit_sqes+0x85c0/0x85c0
[ 2529.458912]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2529.459445]  ? wait_for_completion_io+0x270/0x270
[ 2529.459986]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2529.460507]  ? vfs_write+0x354/0xa70
[ 2529.460926]  ? fput_many+0x2f/0x1a0
[ 2529.461331]  ? ksys_write+0x1a9/0x260
[ 2529.461755]  ? __ia32_sys_read+0xb0/0xb0
[ 2529.462204]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2529.462791]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2529.463364]  do_syscall_64+0x33/0x40
[ 2529.463778]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2529.464345] RIP: 0033:0x7f05f7ac5b19
[ 2529.464742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2529.466769] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2529.467607] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2529.468386] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2529.469174] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2529.469963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2529.470749] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2529.496635] isofs_fill_super: get root inode failed
07:46:59 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

07:46:59 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000800000554e6c54360eb64466cb2a909b6a7fd98b43a13b062706ce22196cff61fb42e865830b"], 0x2a)

07:47:00 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0)

07:47:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

07:47:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830bb234e38b43c3d87f833a7cdf9bbfdfc89e2fd8cb9920691c1e3ee6fd35d1173434294b05cb9a576a393454ed20bb9279d71e0c917cef0d4be4df42da2394e76d0f28b3aacb6524f6d50944a0248463330169de86fcb705fa5b827900"/148], 0x2a)

07:47:00 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3559, 0x0, 0x0)

07:47:00 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:47:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x3cb, 0x0, 0x0, 0x0)

07:47:00 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:47:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

[ 2529.687411] isofs_fill_super: get root inode failed
07:47:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)

07:47:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000000000000006c54360ebd51092ac5ee9a655068b6c9b8be8bb64466cb2a909b6a7fd98b43b23b"], 0x2a)

07:47:00 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0)

07:47:00 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2529.786010] FAULT_INJECTION: forcing a failure.
[ 2529.786010] name failslab, interval 1, probability 0, space 0, times 0
[ 2529.788520] CPU: 0 PID: 14614 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2529.789939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2529.791608] Call Trace:
[ 2529.792160]  dump_stack+0x107/0x167
[ 2529.792914]  should_fail.cold+0x5/0xa
[ 2529.793706]  ? create_object.isra.0+0x3a/0xa20
[ 2529.794651]  should_failslab+0x5/0x20
[ 2529.795427]  kmem_cache_alloc+0x5b/0x310
[ 2529.796273]  ? mark_held_locks+0x9e/0xe0
[ 2529.797132]  create_object.isra.0+0x3a/0xa20
[ 2529.798048]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2529.799164]  kmem_cache_alloc_bulk+0x168/0x320
[ 2529.800093]  io_submit_sqes+0x6f76/0x85c0
[ 2529.800949]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2529.801964]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2529.803065]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2529.804037]  ? lock_downgrade+0x6d0/0x6d0
[ 2529.804880]  ? find_held_lock+0x2c/0x110
[ 2529.805734]  ? io_submit_sqes+0x85c0/0x85c0
[ 2529.806607]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2529.807598]  ? wait_for_completion_io+0x270/0x270
[ 2529.808565]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2529.809540]  ? vfs_write+0x354/0xa70
[ 2529.810307]  ? fput_many+0x2f/0x1a0
[ 2529.811058]  ? ksys_write+0x1a9/0x260
[ 2529.811839]  ? __ia32_sys_read+0xb0/0xb0
[ 2529.812679]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2529.813771]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2529.814824]  do_syscall_64+0x33/0x40
[ 2529.815585]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2529.816622] RIP: 0033:0x7f05f7ac5b19
07:47:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
getpgid(r5)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x55c, 0x38, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="aadb64f514cae4bc3ddece9c4b643edc7319177ab08558f291faa75e221d8a087b28ce49ec4da1b8761cbb0c76a76e4608d6fbe5c2ef9d093353820c714e28e8f5e116331008adbc5590bff9ca887ecb192b7b74066ebdbd5a9e97add4c8a4bcad1209b41a520ecf20b3268617323fc2713ea022f7a3f5ec9629b096d4e0acd19d224fdc0e0aca2299905ff88e95f8d9f58c4cb64ecbd3db062def7cb2dabee505f939fb312dcb4cb41994be43a3447f55ef5610a69c6dc1a164bbf77b0959dc1acf4f7c9962581b929c8f3019d39cd2a735e021014dc785566a6c23c17babbc569264647d6c2187627b857b2b", @nested={0x16d, 0x96, 0x0, 0x1, [@generic="13ba8fd1f7587f0521333cfc4ed6659629c7b515fd6c08308ae20835e1185a3602675f69c35033dfb140ddaef85ab5e5893da88c6b950285d950322b0a31c57a38993d7ee33723502f76c50569afb87137e6edfe66f8379c76926b30c405f21ec132eb0b3d494b7d9e5507b2973464be2a", @typed={0x8, 0x96, 0x0, 0x0, @u32}, @generic="242f71acc957fca807dd61c0bc64d17827e8a2c08115fa28e34479c917cfa370d226f9e945022bbddcbe70443d2c07dca140dd899ef9a8cf8f1b66c283861350a64a9c051a5a87deae957e3356baf5b6261bfb2abb93ec48f354567a1a8c78deb1dbb081d1bd75e7b5ea8cca24a752a059762dd7ddfdbfc8a5e360bea3b8f549af906014ffb3cc05e71f3b122e46a8622a0b91f751e3be983cf2f513743ef6a35660c10364026c1f4c74cf8beecccf5c5190637c90da1b3eddd7a9059840b3190ff75571c2c3be6cc9edecc65877e610b698433bd1f5701dee090a791cfb69d498d9caed4b675b4fa90e92a13e82ff0e"]}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x8b, 0x0, 0x0, @u32=0x7}, @nested={0x110, 0x14, 0x0, 0x1, [@generic="ba6e08ffd5d189c2b67e740372939f4d6e8afda16ef0b3c0e8177b561e1805d0c389b44992a4f10778ef4241edd9b5c5d5c1e4ebbffdbd507475d84614083666c653486bd839c65d0fe183b44f08b08451d33d2866d09c9151ede3da087dff6637a553af29080ac90b7cbf771f0247fc759f9fe670bb9b218ea74cdb338e37a0847cf95b0e91b33bda2ad881", @generic="dbc94b8c40e204b1c9f175b7e1f34d69788cb2e3f4c7fafcfba3a1595c2430d2460c75fc0ab86442481b920fb05ed91206b8070e17495d05316c6bc56ea0a3e4b17fd104e2fb782e", @generic="c168c9a4a5e169d1af5833763ce0a540f362241cc58440b5b9867e80c35e20157a6db40c38421696311e7c86e57efa6e", @typed={0x8, 0x3f, 0x0, 0x0, @pid=r5}]}, @generic="a57a574804e2d8f750abebdcaf5b4a6a74ff8c5730581e1b36239d0fff05721eab1f72c7b0fee714419fde57427a218f1d98883987e878424161245cf91d592c38704640b7f319b6335162e45ede20447b54caaffccb14aaaa4d81b788b282aa26c0778abd49d56617db3dddec1b97b41ce75723e1a8df73352bb327af72e3293937a3bdca821093ee3c2f8e5cd6bfda0db1359de648d86170c99b583a03e4131500afc84b93d870a898b03e77077b12627f03d217a912a5b834371efc7235d23d0aa4443c827a589e71da0604d1e16ab0404b", @nested={0xc1, 0x90, 0x0, 0x1, [@generic="7ff593498d8be98cdd2a329fdb76b1065ba773fe44850ac8d9960fbb5c1bf53579362c15a597ac578c06538d771e09fb68bbca46392f20a85d858154c120780ac0da1c6e9f48d4b22f4804e82a8d3cdded7cde527c9f64e4deee8df9fb16c0", @generic="99bb300290ea63e819d467f539fc522aec8451b02087e8f82a6d0cdbf737be98a4fedb71249fb16b98ba117b86294ad0524073112a24810eadd1d2ddf637be5ab0b2fe19c06a74448f9bb5d9ee39", @typed={0xd, 0x15, 0x0, 0x0, @str='/dev/sg#\x00'}]}, @nested={0xc, 0x76, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x48800)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2529.817382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2529.821136] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2529.822678] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2529.824107] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2529.825547] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2529.826971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2529.828402] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:47:00 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:47:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x500, 0x0, 0x0, 0x0)

[ 2529.846411] isofs_fill_super: get root inode failed
07:47:14 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)

07:47:14 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0)

07:47:14 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xcc0, 0x0, 0x0, 0x0)

07:47:14 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:47:14 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0)

07:47:14 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

07:47:14 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0, <r4=>0x0})
r5 = getpgid(r4)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x80, 0xa4, 0x0, 0x2, 0x0, 0x3, 0x6000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x401, 0x8}, 0x40000, 0x2c200, 0x8000, 0x7, 0x1407, 0x3, 0x3, 0x0, 0x6, 0x0, 0x101}, r5, 0xffffffffffffffff, r3, 0x4)
fcntl$setown(r2, 0x8, r5)

07:47:14 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2544.219374] isofs_fill_super: get root inode failed
07:47:14 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x0)

[ 2544.257091] FAULT_INJECTION: forcing a failure.
[ 2544.257091] name failslab, interval 1, probability 0, space 0, times 0
[ 2544.259679] CPU: 0 PID: 14650 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2544.261104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2544.262829] Call Trace:
[ 2544.263378]  dump_stack+0x107/0x167
[ 2544.264140]  should_fail.cold+0x5/0xa
[ 2544.264926]  ? create_object.isra.0+0x3a/0xa20
[ 2544.265887]  should_failslab+0x5/0x20
[ 2544.266671]  kmem_cache_alloc+0x5b/0x310
[ 2544.267501]  ? mark_held_locks+0x9e/0xe0
[ 2544.268344]  create_object.isra.0+0x3a/0xa20
[ 2544.269244]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2544.270300]  kmem_cache_alloc_bulk+0x168/0x320
[ 2544.271241]  io_submit_sqes+0x6f76/0x85c0
[ 2544.272096]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2544.273107]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2544.274127]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2544.275115]  ? lock_downgrade+0x6d0/0x6d0
[ 2544.275955]  ? find_held_lock+0x2c/0x110
[ 2544.276788]  ? io_submit_sqes+0x85c0/0x85c0
[ 2544.277676]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2544.278693]  ? wait_for_completion_io+0x270/0x270
[ 2544.279682]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2544.280633]  ? vfs_write+0x354/0xa70
[ 2544.281401]  ? fput_many+0x2f/0x1a0
[ 2544.282157]  ? ksys_write+0x1a9/0x260
[ 2544.282931]  ? __ia32_sys_read+0xb0/0xb0
[ 2544.283763]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2544.284824]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2544.285884]  do_syscall_64+0x33/0x40
[ 2544.286642]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2544.287681] RIP: 0033:0x7f05f7ac5b19
[ 2544.288440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2544.292199] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2544.293761] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2544.295213] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2544.296667] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2544.298118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2544.299561] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:47:30 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)

07:47:30 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x0)

07:47:30 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5935, 0x0, 0x0)

07:47:30 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:47:30 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x109002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fc4287778ccf06ffc8cd98b43b23b062706cea2196cf561fb42e865870bb0773fb79e306fea317965ca6d50802dd792b526b277a8c91604b803cfe67572fd54556833d131ad911f84630255579d80eddf8a69e6043492369ee0cd475edac7a022892dda886c8f1b5b768c1f1ab0dd35168480d0633c9480b250cd9ef34b425ef9e16acb0bc5d6a731c7330e309a0b9db643cd700217ad8387b045d38cef1151e65998d00fd86688c6eb23bd76de3e07b4e96abe8efaaed0030d93c530ac9d7b4d5ee419e4ca197d62e2851841a67beab5ecf4"], 0x2a)

07:47:30 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:47:30 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:47:30 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0)

[ 2559.723133] FAULT_INJECTION: forcing a failure.
[ 2559.723133] name failslab, interval 1, probability 0, space 0, times 0
[ 2559.724533] CPU: 1 PID: 14681 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2559.725287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2559.726186] Call Trace:
[ 2559.726480]  dump_stack+0x107/0x167
[ 2559.726895]  should_fail.cold+0x5/0xa
[ 2559.727201] isofs_fill_super: get root inode failed
[ 2559.727322]  ? create_object.isra.0+0x3a/0xa20
[ 2559.728863]  should_failslab+0x5/0x20
[ 2559.729270]  kmem_cache_alloc+0x5b/0x310
[ 2559.729705]  ? mark_held_locks+0x9e/0xe0
[ 2559.730153]  create_object.isra.0+0x3a/0xa20
[ 2559.730635]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2559.731184]  kmem_cache_alloc_bulk+0x168/0x320
[ 2559.731682]  io_submit_sqes+0x6f76/0x85c0
[ 2559.732129]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 2559.732703]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2559.733232]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2559.733761]  ? io_submit_sqes+0x85c0/0x85c0
[ 2559.734235]  ? recalibrate_cpu_khz+0x10/0x10
[ 2559.734701]  ? ktime_get+0x158/0x1f0
[ 2559.735103]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 2559.735562]  ? clockevents_program_event+0x131/0x360
[ 2559.736102]  ? tick_program_event+0xa8/0x140
[ 2559.736572]  ? hrtimer_interrupt+0x771/0x9b0
[ 2559.737065]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2559.737618]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2559.738180]  do_syscall_64+0x33/0x40
[ 2559.738577]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2559.739115] RIP: 0033:0x7f05f7ac5b19
[ 2559.739514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2559.741443] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2559.742289] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2559.743053] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2559.743804] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2559.744557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2559.745308] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:47:30 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x0)

07:47:30 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x4008240b, &(0x7f0000000000))
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)="28e1dc9025b411726a8656655e7e0b8ce3c4e3809a9311fc56cbb0ac7f25b00c3aca19a1dfb7623e60f39448ef667150b8398958949ebd6abd5ba47b0088b7e7bd20a497172242b168553898e365f2fec1b56113a7d6d220ddf2ee165cd54abc38035e0b840adab0ab1915b0251ead615b73b6156fe1d44df29978225c99cb1a83180c651a7eb0bebe0ce50c8c95c1f7634fc601ce1f21443da09c4dc6df2c4a4b27aa59442095386ddc44d573178958f22c95550a3e0cf6c675c491c48b5470fef3aa20cab1737c390a48", 0xcb}], 0x1)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54362cb6e866000000000000000042b23b06fe146c511232f6932706cea2196c"], 0x2a)

07:47:30 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0)

[ 2559.810518] sg_write: data in/out 1913762817/17 bytes for SCSI command 0xdf-- guessing data in;
[ 2559.810518]    program syz-executor.4 not setting count and/or reply_len properly
07:47:30 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8702, 0x0, 0x0)

07:47:30 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2559.859674] sg_write: data in/out 1913762817/17 bytes for SCSI command 0xdf-- guessing data in;
[ 2559.859674]    program syz-executor.4 not setting count and/or reply_len properly
07:47:30 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x3876, 0x0, 0x0, 0x0)

[ 2559.972145] isofs_fill_super: get root inode failed
07:47:48 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x3f00, 0x0, 0x0, 0x0)

07:47:48 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)

07:47:48 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x1, 0x0)

07:47:48 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xff, 0xe6, 0xc4, 0x0, 0x0, 0x58f, 0x11580, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x5000000000000, 0x7}, 0x9002, 0x2, 0x1, 0x3, 0xe80, 0x80000000, 0x7, 0x0, 0x9, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

07:47:48 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:47:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c, 0x0, 0x0)

07:47:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x60, 0x0, 0x0)

07:47:48 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:47:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x1, 0x0)

[ 2578.565662] FAULT_INJECTION: forcing a failure.
[ 2578.565662] name failslab, interval 1, probability 0, space 0, times 0
[ 2578.568527] CPU: 0 PID: 14745 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2578.569984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2578.571726] Call Trace:
[ 2578.572290]  dump_stack+0x107/0x167
[ 2578.573061]  should_fail.cold+0x5/0xa
[ 2578.573868]  ? __io_queue_sqe+0x666/0x9d0
[ 2578.574761]  should_failslab+0x5/0x20
[ 2578.575563]  kmem_cache_alloc_trace+0x55/0x320
[ 2578.576530]  __io_queue_sqe+0x666/0x9d0
[ 2578.577378]  ? io_issue_sqe+0x7700/0x7700
[ 2578.578267]  ? io_prep_rw+0x7f5/0x1050
[ 2578.579092]  io_submit_sqes+0x4461/0x85c0
[ 2578.580003]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2578.581043]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2578.582062]  ? lock_downgrade+0x6d0/0x6d0
[ 2578.582934]  ? find_held_lock+0x2c/0x110
[ 2578.583793]  ? io_submit_sqes+0x85c0/0x85c0
07:47:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

[ 2578.584709]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2578.585837]  ? wait_for_completion_io+0x270/0x270
[ 2578.586860]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2578.587836]  ? vfs_write+0x354/0xa70
[ 2578.588622]  ? fput_many+0x2f/0x1a0
[ 2578.589386]  ? ksys_write+0x1a9/0x260
[ 2578.590195]  ? __ia32_sys_read+0xb0/0xb0
[ 2578.591055]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2578.592148]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2578.593236]  do_syscall_64+0x33/0x40
[ 2578.594019]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2578.595111] RIP: 0033:0x7f05f7ac5b19
[ 2578.595895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
07:47:49 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x4000, 0x0, 0x0, 0x0)

[ 2578.599741] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2578.601387] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2578.602905] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2578.602921] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2578.605186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2578.606726] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2578.623586] isofs_fill_super: get root inode failed
07:47:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x215, 0x0, 0x0)

07:47:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000010000000554e6c54360eb64466cb2a909b6a7fd98b43b20bad27065a050000f561fb42e865830b"], 0x2a)

07:47:49 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)

07:47:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x1, 0x0)

[ 2578.687928] FAULT_INJECTION: forcing a failure.
[ 2578.687928] name failslab, interval 1, probability 0, space 0, times 0
[ 2578.689866] CPU: 1 PID: 14760 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2578.690581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2578.691400] Call Trace:
[ 2578.691676]  dump_stack+0x107/0x167
[ 2578.692039]  should_fail.cold+0x5/0xa
[ 2578.692422]  ? __io_queue_sqe+0x666/0x9d0
[ 2578.692836]  should_failslab+0x5/0x20
[ 2578.693214]  kmem_cache_alloc_trace+0x55/0x320
[ 2578.693675]  __io_queue_sqe+0x666/0x9d0
[ 2578.694075]  ? io_issue_sqe+0x7700/0x7700
[ 2578.694497]  ? io_prep_rw+0x7f5/0x1050
[ 2578.694888]  io_submit_sqes+0x4461/0x85c0
[ 2578.695313]  ? __do_sys_io_uring_enter+0x175/0x18a0
[ 2578.695815]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2578.696305]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2578.696792]  ? lock_downgrade+0x6d0/0x6d0
[ 2578.697233]  ? find_held_lock+0x2c/0x110
[ 2578.697645]  ? io_submit_sqes+0x85c0/0x85c0
[ 2578.698083]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2578.698573]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2578.699094]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2578.699629]  ? trace_hardirqs_on+0x5b/0x180
[ 2578.700104]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2578.700657]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2578.701174]  do_syscall_64+0x33/0x40
[ 2578.701556]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2578.702099] RIP: 0033:0x7f05f7ac5b19
[ 2578.702496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2578.704460] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2578.705248] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2578.706011] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2578.706740] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2578.707477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2578.708244] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:47:49 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:47:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffefffffffffff, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"])
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000026380af2cf3fbe42897b90487a2398a25e0597cf920eb64466cb2a909b0800000043b23b062706cea2196cf561fb42e865830b"], 0x2a)

07:47:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0)

07:47:49 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:47:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0)

[ 2578.848914] isofs_fill_super: get root inode failed
07:48:03 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xcc0, 0x0, 0x0)

07:48:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x7638, 0x0, 0x0, 0x0)

07:48:03 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:48:03 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)

07:48:03 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:03 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0)

07:48:03 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = signalfd(r0, &(0x7f00000000c0)={[0x100000000]}, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x81, 0x2, 0xff, 0x0, 0x4f9, 0x18, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x21a4, 0x1, @perf_config_ext={0x0, 0x7}, 0x1800, 0x1, 0x9, 0x4, 0x5, 0x5, 0x1, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0xf, r1, 0x1)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
r4 = syz_io_uring_setup(0x12ef, &(0x7f0000000000)={0x0, 0xd222, 0x0, 0x0, 0x336}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
pread64(r5, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r6, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x4000010, r4, 0x8000000)
syz_io_uring_complete(r7)
syz_io_uring_setup(0x3253, &(0x7f0000000100)={0x0, 0x65f2, 0x4, 0x0, 0x1e5, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r5, &(0x7f0000000200)={0x3, 0x80, 0x17}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}, 0x10001)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x9, &(0x7f00000001c0)=[{0x4, 0x6, 0x2, 0xdef6}, {0xfba, 0x4, 0x23, 0x5}, {0x5, 0x2, 0xea, 0xfffffff8}, {0x9, 0x8, 0x9, 0x1000}, {0x401, 0x4f, 0x8, 0x3}, {0x8f3, 0x3, 0x0, 0x1}, {0x20, 0x8, 0x40, 0x18}, {0xff, 0x3, 0x0, 0x401}, {0x7fff, 0x0, 0x7f, 0x7}]})
syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4, @fd=r9, 0x7, &(0x7f0000000240)="2fe244e3f148227906491cc9c20355ab76624cde32a02f4eae47e198fc075a3d9e788980de017911f18b955f706a8da10f3685752bc7a1d30a4256bf685cac831ff3867dbfd908b1b28d6572544e5058bb24f40d6ae5c91bd62d62e1aa185747a4", 0x61, 0x2, 0x1}, 0x0)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x29b)
fallocate(r3, 0x8, 0x4, 0x9)
write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000554e6c54360eb6448f21a94a4519814b7266e25f909b6a7fd98b43b23b00000000a2196cf561fb42e865830b7c680689193080e69db5876d0ac45be59ecc970b1bd314d9239f964d37d763f9333e273aff92a492352f24a0b9"], 0x2a)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

07:48:03 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, <r5=>0x0})
getpgid(r5)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x55c, 0x38, 0x400, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="aadb64f514cae4bc3ddece9c4b643edc7319177ab08558f291faa75e221d8a087b28ce49ec4da1b8761cbb0c76a76e4608d6fbe5c2ef9d093353820c714e28e8f5e116331008adbc5590bff9ca887ecb192b7b74066ebdbd5a9e97add4c8a4bcad1209b41a520ecf20b3268617323fc2713ea022f7a3f5ec9629b096d4e0acd19d224fdc0e0aca2299905ff88e95f8d9f58c4cb64ecbd3db062def7cb2dabee505f939fb312dcb4cb41994be43a3447f55ef5610a69c6dc1a164bbf77b0959dc1acf4f7c9962581b929c8f3019d39cd2a735e021014dc785566a6c23c17babbc569264647d6c2187627b857b2b", @nested={0x16d, 0x96, 0x0, 0x1, [@generic="13ba8fd1f7587f0521333cfc4ed6659629c7b515fd6c08308ae20835e1185a3602675f69c35033dfb140ddaef85ab5e5893da88c6b950285d950322b0a31c57a38993d7ee33723502f76c50569afb87137e6edfe66f8379c76926b30c405f21ec132eb0b3d494b7d9e5507b2973464be2a", @typed={0x8, 0x96, 0x0, 0x0, @u32}, @generic="242f71acc957fca807dd61c0bc64d17827e8a2c08115fa28e34479c917cfa370d226f9e945022bbddcbe70443d2c07dca140dd899ef9a8cf8f1b66c283861350a64a9c051a5a87deae957e3356baf5b6261bfb2abb93ec48f354567a1a8c78deb1dbb081d1bd75e7b5ea8cca24a752a059762dd7ddfdbfc8a5e360bea3b8f549af906014ffb3cc05e71f3b122e46a8622a0b91f751e3be983cf2f513743ef6a35660c10364026c1f4c74cf8beecccf5c5190637c90da1b3eddd7a9059840b3190ff75571c2c3be6cc9edecc65877e610b698433bd1f5701dee090a791cfb69d498d9caed4b675b4fa90e92a13e82ff0e"]}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x8b, 0x0, 0x0, @u32=0x7}, @nested={0x110, 0x14, 0x0, 0x1, [@generic="ba6e08ffd5d189c2b67e740372939f4d6e8afda16ef0b3c0e8177b561e1805d0c389b44992a4f10778ef4241edd9b5c5d5c1e4ebbffdbd507475d84614083666c653486bd839c65d0fe183b44f08b08451d33d2866d09c9151ede3da087dff6637a553af29080ac90b7cbf771f0247fc759f9fe670bb9b218ea74cdb338e37a0847cf95b0e91b33bda2ad881", @generic="dbc94b8c40e204b1c9f175b7e1f34d69788cb2e3f4c7fafcfba3a1595c2430d2460c75fc0ab86442481b920fb05ed91206b8070e17495d05316c6bc56ea0a3e4b17fd104e2fb782e", @generic="c168c9a4a5e169d1af5833763ce0a540f362241cc58440b5b9867e80c35e20157a6db40c38421696311e7c86e57efa6e", @typed={0x8, 0x3f, 0x0, 0x0, @pid=r5}]}, @generic="a57a574804e2d8f750abebdcaf5b4a6a74ff8c5730581e1b36239d0fff05721eab1f72c7b0fee714419fde57427a218f1d98883987e878424161245cf91d592c38704640b7f319b6335162e45ede20447b54caaffccb14aaaa4d81b788b282aa26c0778abd49d56617db3dddec1b97b41ce75723e1a8df73352bb327af72e3293937a3bdca821093ee3c2f8e5cd6bfda0db1359de648d86170c99b583a03e4131500afc84b93d870a898b03e77077b12627f03d217a912a5b834371efc7235d23d0aa4443c827a589e71da0604d1e16ab0404b", @nested={0xc1, 0x90, 0x0, 0x1, [@generic="7ff593498d8be98cdd2a329fdb76b1065ba773fe44850ac8d9960fbb5c1bf53579362c15a597ac578c06538d771e09fb68bbca46392f20a85d858154c120780ac0da1c6e9f48d4b22f4804e82a8d3cdded7cde527c9f64e4deee8df9fb16c0", @generic="99bb300290ea63e819d467f539fc522aec8451b02087e8f82a6d0cdbf737be98a4fedb71249fb16b98ba117b86294ad0524073112a24810eadd1d2ddf637be5ab0b2fe19c06a74448f9bb5d9ee39", @typed={0xd, 0x15, 0x0, 0x0, @str='/dev/sg#\x00'}]}, @nested={0xc, 0x76, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x48800)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2593.020186] FAULT_INJECTION: forcing a failure.
[ 2593.020186] name failslab, interval 1, probability 0, space 0, times 0
[ 2593.023862] CPU: 1 PID: 14815 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2593.025285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2593.027004] Call Trace:
[ 2593.027568]  dump_stack+0x107/0x167
[ 2593.028330]  should_fail.cold+0x5/0xa
[ 2593.029128]  ? __io_queue_proc+0x262/0x5a0
[ 2593.030053]  should_failslab+0x5/0x20
[ 2593.030878]  kmem_cache_alloc_trace+0x55/0x320
[ 2593.031865]  ? _raw_spin_unlock_irqrestore+0x25/0x40
[ 2593.032962]  __io_queue_proc+0x262/0x5a0
[ 2593.033838]  ? io_poll_queue_proc+0x50/0x50
[ 2593.034809]  n_tty_poll+0xba/0x8f0
[ 2593.035575]  ? n_tty_ioctl+0x370/0x370
[ 2593.036410]  tty_poll+0x144/0x1c0
[ 2593.037158]  ? tty_release+0xe90/0xe90
[ 2593.037989]  __io_arm_poll_handler+0x399/0x9e0
[ 2593.038991]  __io_queue_sqe+0x52b/0x9d0
[ 2593.039854]  ? io_issue_sqe+0x7700/0x7700
[ 2593.040742]  ? io_poll_queue_proc+0x50/0x50
[ 2593.041662]  ? io_prep_rw+0x7f5/0x1050
[ 2593.042511]  io_submit_sqes+0x4461/0x85c0
[ 2593.043431]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2593.044494]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2593.045524]  ? lock_downgrade+0x6d0/0x6d0
[ 2593.046419]  ? find_held_lock+0x2c/0x110
[ 2593.047286]  ? io_submit_sqes+0x85c0/0x85c0
[ 2593.048210]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2593.049236]  ? wait_for_completion_io+0x270/0x270
[ 2593.050261]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2593.051257]  ? vfs_write+0x354/0xa70
[ 2593.052056]  ? fput_many+0x2f/0x1a0
[ 2593.052841]  ? ksys_write+0x1a9/0x260
[ 2593.053661]  ? __ia32_sys_read+0xb0/0xb0
[ 2593.054550]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2593.055663]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2593.056767]  do_syscall_64+0x33/0x40
[ 2593.057564]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2593.058659] RIP: 0033:0x7f05f7ac5b19
[ 2593.059452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2593.063362] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2593.064982] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2593.066512] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2593.068025] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2593.069538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2593.071064] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2593.077589] isofs_fill_super: get root inode failed
07:48:03 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x1502, 0x0, 0x0)

07:48:03 executing program 5:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:03 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0)

07:48:03 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:48:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xc00c, 0x0, 0x0, 0x0)

07:48:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 1)

07:48:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xcb03, 0x0, 0x0, 0x0)

07:48:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:48:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3564, 0x0, 0x0)

07:48:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)

07:48:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2607.961082] FAULT_INJECTION: forcing a failure.
[ 2607.961082] name failslab, interval 1, probability 0, space 0, times 0
[ 2607.962754] CPU: 1 PID: 14859 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2607.963433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2607.964246] Call Trace:
[ 2607.964520]  dump_stack+0x107/0x167
[ 2607.964892]  should_fail.cold+0x5/0xa
[ 2607.965274]  ? create_object.isra.0+0x3a/0xa20
[ 2607.965724]  should_failslab+0x5/0x20
[ 2607.966099]  kmem_cache_alloc+0x5b/0x310
[ 2607.966512]  create_object.isra.0+0x3a/0xa20
[ 2607.966951]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2607.967457]  kmem_cache_alloc_trace+0x151/0x320
[ 2607.967931]  __io_queue_proc+0x262/0x5a0
[ 2607.968336]  ? io_poll_queue_proc+0x50/0x50
[ 2607.968775]  n_tty_poll+0xba/0x8f0
[ 2607.969132]  ? n_tty_ioctl+0x370/0x370
[ 2607.969523]  tty_poll+0x144/0x1c0
[ 2607.969870]  ? tty_release+0xe90/0xe90
[ 2607.970256]  __io_arm_poll_handler+0x399/0x9e0
[ 2607.970723]  __io_queue_sqe+0x52b/0x9d0
[ 2607.971124]  ? io_issue_sqe+0x7700/0x7700
[ 2607.971534]  ? io_poll_queue_proc+0x50/0x50
[ 2607.971964]  ? io_prep_rw+0x7f5/0x1050
[ 2607.972352]  io_submit_sqes+0x4461/0x85c0
[ 2607.972788]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2607.973281]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2607.973767]  ? io_submit_sqes+0x85c0/0x85c0
[ 2607.974198]  ? recalibrate_cpu_khz+0x10/0x10
[ 2607.974654]  ? ktime_get+0x158/0x1f0
[ 2607.975027]  ? setup_APIC_eilvt+0x2f0/0x2f0
[ 2607.975491]  ? clockevents_program_event+0x131/0x360
[ 2607.976040]  ? tick_program_event+0xa8/0x140
[ 2607.976514]  ? hrtimer_interrupt+0x771/0x9b0
[ 2607.976999]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2607.977555]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2607.978109]  do_syscall_64+0x33/0x40
[ 2607.978519]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2607.979051] RIP: 0033:0x7f05f7ac5b19
[ 2607.979463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2607.981547] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2607.982399] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2607.983190] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2607.983985] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2607.984779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2607.985568] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2607.993052] isofs_fill_super: get root inode failed
[ 2607.999603] FAULT_INJECTION: forcing a failure.
[ 2607.999603] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2608.000866] CPU: 1 PID: 14867 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2608.001548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2608.002367] Call Trace:
[ 2608.002639]  dump_stack+0x107/0x167
[ 2608.003007]  should_fail.cold+0x5/0xa
[ 2608.003393]  _copy_from_user+0x2e/0x1b0
[ 2608.003811]  __copy_msghdr_from_user+0x91/0x4b0
[ 2608.004272]  ? __ia32_sys_shutdown+0x80/0x80
[ 2608.004717]  ? __lock_acquire+0xbb1/0x5b00
[ 2608.005148]  sendmsg_copy_msghdr+0xa1/0x160
[ 2608.005576]  ? do_recvmmsg+0x6d0/0x6d0
[ 2608.005964]  ? perf_trace_lock+0xac/0x490
[ 2608.006374]  ? SOFTIRQ_verbose+0x10/0x10
[ 2608.006791]  ? __lockdep_reset_lock+0x180/0x180
[ 2608.007250]  ? perf_trace_lock+0xac/0x490
[ 2608.007663]  ___sys_sendmsg+0xc6/0x170
[ 2608.008053]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2608.008509]  ? __fget_files+0x26d/0x4c0
[ 2608.008921]  ? lock_downgrade+0x6d0/0x6d0
[ 2608.009392]  ? lock_downgrade+0x6d0/0x6d0
[ 2608.009859]  ? __fget_files+0x296/0x4c0
[ 2608.010312]  ? __fget_light+0xea/0x290
[ 2608.010756]  __sys_sendmmsg+0x195/0x470
[ 2608.011198]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2608.011678]  ? lock_downgrade+0x6d0/0x6d0
[ 2608.012146]  ? ksys_write+0x12d/0x260
[ 2608.012576]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2608.013115]  ? wait_for_completion_io+0x270/0x270
[ 2608.013643]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2608.014161]  ? vfs_write+0x354/0xa70
[ 2608.014592]  ? fput_many+0x2f/0x1a0
[ 2608.014995]  ? ksys_write+0x1a9/0x260
[ 2608.015417]  ? __ia32_sys_read+0xb0/0xb0
[ 2608.015879]  __x64_sys_sendmmsg+0x99/0x100
[ 2608.016349]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2608.016929]  do_syscall_64+0x33/0x40
[ 2608.017345]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2608.017916] RIP: 0033:0x7fef13252b19
[ 2608.018337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2608.020380] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2608.021231] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2608.022043] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2608.022826] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2608.023622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2608.024421] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:48:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
signalfd4(r2, &(0x7f0000000240)={[0x1]}, 0x8, 0x80800)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a062706cea2196ce561fb42e865830b98a0c8e712be5e92e78543d34930f8697a6bfb6d8dc9b613178673691d122a2586b06a8afaae530e9d36baa548f82353762a3a044c87dc121f3fa11f635abb677d5a5f433c354f4a53b1dd99ca0c480be8803e8fec1c5aff785d49a3e9e528cd52b0c7bd39cde18864f965dcc6fd400e5bf646c4e34816e61081920394c9ca"], 0x2a)

07:48:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0)

07:48:18 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x3, 0x101a02)
r2 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="000088e5bcfcd64a537c712fc92088957a58be5bc00a4d753ec34d3212c09aa667ef9ad2042ebbebb42a99d1647b5b5ad43863f7f06d02a25ef5f1df995662091c920300662d14f46966e3ddeeecf825a079a28eb4c545ded6940ca91c31e70d14de515fa7537d3072350195141537743426596ae8b72a35fbeb43ba16836f026fbcfc738c9dba67cd32addefd7879ef340969554271b9e8bed8decdd84cffffffff00000000d7aebfab3cf760527c1ca2d8826727580dd22f309be1a72f57c95bc5d5b04d6dc05d1dfef2403c38de6352f36e659001b439bdd47635bb256a564d"], 0x9a)

07:48:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:48:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

[ 2608.177684] isofs_fill_super: get root inode failed
[ 2621.370127] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
07:48:31 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:31 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0xf3)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/bdi', 0x200802, 0x44)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000080)={0x71, ""/113})
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)

07:48:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022", 0x9d, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:48:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 2)

07:48:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0)

07:48:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0)

07:48:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x2000000, 0x0, 0x0, 0x0)

07:48:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)

[ 2621.376679] FAULT_INJECTION: forcing a failure.
[ 2621.376679] name failslab, interval 1, probability 0, space 0, times 0
[ 2621.379262] CPU: 0 PID: 14911 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2621.380741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2621.382519] Call Trace:
[ 2621.383112]  dump_stack+0x107/0x167
[ 2621.383906]  should_fail.cold+0x5/0xa
[ 2621.384732]  ? __alloc_skb+0x6d/0x5b0
[ 2621.385557]  should_failslab+0x5/0x20
[ 2621.386374]  kmem_cache_alloc_node+0x55/0x330
[ 2621.387344]  ? perf_tp_event+0x5ce/0xc00
[ 2621.388212]  ? tracing_generic_entry_update+0x1ed/0x270
[ 2621.389358]  __alloc_skb+0x6d/0x5b0
[ 2621.390161]  alloc_skb_with_frags+0x92/0x570
[ 2621.391153]  sock_alloc_send_pskb+0x7af/0x930
[ 2621.392162]  ? sk_alloc+0x350/0x350
[ 2621.392970]  ? perf_trace_lock+0xac/0x490
[ 2621.393862]  ? SOFTIRQ_verbose+0x10/0x10
[ 2621.394742]  ? lock_chain_count+0x20/0x20
[ 2621.395682]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 2621.396784]  ? ip6_mtu+0x1bb/0x3d0
[ 2621.397553]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.398445]  ? ip_frag_init+0x350/0x350
[ 2621.399350]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 2621.400343]  ? ip6_mtu+0x1e9/0x3d0
[ 2621.401110]  ? ip6_setup_cork+0xfb7/0x1740
07:48:31 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r2)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x126)
read(r2, 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000100))
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000271a6f00554e6c54360eb644468dd85991d66aee9743323b00000000a2196cf561fb42e865830b9dea495446aeba383161f1d62a48918573c24955425ddfda764377098fff6f2f1f00ebf4c5aec75d8ce6362d17d364dd413dbb8d0212d893074a7c34735ef9354ee783bcdd267cdc77b4f994c0149f317e22eaa5c495b586de4a2996ad3539899814d193c9d3c969ca2798f466c1ab1e923ecae9"], 0x2a)

[ 2621.402154]  ip6_make_skb+0x2de/0x4e0
[ 2621.403004]  ? ip_frag_init+0x350/0x350
[ 2621.403889]  ? ip_frag_init+0x350/0x350
[ 2621.404745]  ? ip6_push_pending_frames+0xf0/0xf0
[ 2621.405770]  ? ip6_dst_hoplimit+0x199/0x440
[ 2621.406718]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.407658]  udpv6_sendmsg+0x20d0/0x2af0
[ 2621.408582]  ? ip_frag_init+0x350/0x350
[ 2621.409463]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.410598]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.410622]  ? perf_event_switch_output+0x7d0/0x7d0
[ 2621.410678]  ? lock_acquire+0x197/0x470
[ 2621.410700]  ? find_held_lock+0x2c/0x110
[ 2621.410762]  ? sock_has_perm+0x1ea/0x280
[ 2621.414879]  ? __import_iovec+0x458/0x590
[ 2621.415014] FAULT_INJECTION: forcing a failure.
[ 2621.415014] name failslab, interval 1, probability 0, space 0, times 0
[ 2621.415764]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.415798]  inet6_sendmsg+0x105/0x140
[ 2621.418919]  ? inet6_compat_ioctl+0x320/0x320
[ 2621.419885]  sock_sendmsg+0xf2/0x190
[ 2621.420685]  ____sys_sendmsg+0x334/0x870
[ 2621.421593]  ? kernel_sendmsg+0x50/0x50
[ 2621.422448]  ? do_recvmmsg+0x6d0/0x6d0
[ 2621.423323]  ? perf_trace_lock+0xac/0x490
[ 2621.424245]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.425266]  ? perf_trace_lock+0xac/0x490
[ 2621.426171]  ___sys_sendmsg+0xf3/0x170
[ 2621.427042]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2621.428060]  ? __fget_files+0x26d/0x4c0
[ 2621.428908]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.429828]  ? __fget_files+0x296/0x4c0
[ 2621.430743]  ? __fget_light+0xea/0x290
[ 2621.431592]  __sys_sendmmsg+0x195/0x470
[ 2621.432463]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2621.433384]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.434303]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2621.435361]  ? wait_for_completion_io+0x270/0x270
[ 2621.436413]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2621.437424]  ? vfs_write+0x354/0xa70
[ 2621.438253]  ? fput_many+0x2f/0x1a0
[ 2621.439054]  ? ksys_write+0x1a9/0x260
[ 2621.439878]  ? __ia32_sys_read+0xb0/0xb0
[ 2621.440778]  __x64_sys_sendmmsg+0x99/0x100
[ 2621.441700]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2621.442828]  do_syscall_64+0x33/0x40
[ 2621.443644]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2621.444762] RIP: 0033:0x7fef13252b19
[ 2621.445597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2621.449609] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2621.451283] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2621.452793] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2621.454299] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2621.455830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2621.457344] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
[ 2621.458939] CPU: 1 PID: 14919 Comm: syz-executor.7 Not tainted 5.10.194 #1
07:48:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x5000000, 0x0, 0x0, 0x0)

[ 2621.459772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2621.460672] Call Trace:
[ 2621.460953]  dump_stack+0x107/0x167
[ 2621.461338]  should_fail.cold+0x5/0xa
[ 2621.461746]  ? __io_queue_proc+0x262/0x5a0
[ 2621.462192]  should_failslab+0x5/0x20
[ 2621.462592]  kmem_cache_alloc_trace+0x55/0x320
[ 2621.463089]  ? _raw_spin_unlock_irqrestore+0x38/0x40
[ 2621.463619]  __io_queue_proc+0x262/0x5a0
[ 2621.464044]  ? io_poll_queue_proc+0x50/0x50
[ 2621.464500]  n_tty_poll+0xba/0x8f0
[ 2621.464881]  ? n_tty_ioctl+0x370/0x370
[ 2621.465294]  tty_poll+0x144/0x1c0
[ 2621.465657]  ? tty_release+0xe90/0xe90
[ 2621.466072]  __io_arm_poll_handler+0x399/0x9e0
[ 2621.466561]  __io_queue_sqe+0x52b/0x9d0
[ 2621.466996]  ? io_issue_sqe+0x7700/0x7700
[ 2621.467435]  ? io_poll_queue_proc+0x50/0x50
[ 2621.467901]  ? io_prep_rw+0x7f5/0x1050
[ 2621.468324]  io_submit_sqes+0x4461/0x85c0
[ 2621.468783]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2621.469305]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2621.469811]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.470250]  ? find_held_lock+0x2c/0x110
[ 2621.470697]  ? io_submit_sqes+0x85c0/0x85c0
[ 2621.471169]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2621.471686]  ? wait_for_completion_io+0x270/0x270
[ 2621.472198]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2621.472682]  ? vfs_write+0x354/0xa70
[ 2621.473078]  ? fput_many+0x2f/0x1a0
[ 2621.473485]  ? ksys_write+0x1a9/0x260
[ 2621.473888]  ? __ia32_sys_read+0xb0/0xb0
[ 2621.474321]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2621.474879]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2621.475427]  do_syscall_64+0x33/0x40
[ 2621.475817]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2621.476370] RIP: 0033:0x7f05f7ac5b19
[ 2621.476763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2621.478677] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2621.479470] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2621.480213] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2621.480959] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2621.481720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2621.482478] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
[ 2621.518944] isofs_fill_super: get root inode failed
07:48:32 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 3)

07:48:32 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x59350000, 0x0, 0x0)

07:48:32 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x0, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2621.563201] FAULT_INJECTION: forcing a failure.
[ 2621.563201] name failslab, interval 1, probability 0, space 0, times 0
[ 2621.564531] CPU: 1 PID: 14934 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2621.565263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2621.566171] Call Trace:
[ 2621.566474]  dump_stack+0x107/0x167
[ 2621.566869]  should_fail.cold+0x5/0xa
[ 2621.567281]  ? create_object.isra.0+0x3a/0xa20
[ 2621.567780]  should_failslab+0x5/0x20
[ 2621.568188]  kmem_cache_alloc+0x5b/0x310
[ 2621.568627]  create_object.isra.0+0x3a/0xa20
[ 2621.569103]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2621.569642]  kmem_cache_alloc_node+0x169/0x330
[ 2621.570163]  __alloc_skb+0x6d/0x5b0
[ 2621.570562]  alloc_skb_with_frags+0x92/0x570
[ 2621.571069]  ? lock_acquire+0x197/0x470
[ 2621.571486]  ? find_held_lock+0x2c/0x110
[ 2621.571937]  sock_alloc_send_pskb+0x7af/0x930
[ 2621.572430]  ? sk_alloc+0x350/0x350
[ 2621.572816]  ? perf_trace_lock+0xac/0x490
[ 2621.573260]  ? SOFTIRQ_verbose+0x10/0x10
[ 2621.573687]  ? lock_chain_count+0x20/0x20
[ 2621.574136]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 2621.574677]  ? ip6_mtu+0x1bb/0x3d0
[ 2621.575059]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.575497]  ? ip_frag_init+0x350/0x350
[ 2621.575928]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 2621.576416]  ? ip6_mtu+0x1e9/0x3d0
[ 2621.576791]  ? ip6_setup_cork+0xfb7/0x1740
[ 2621.577246]  ip6_make_skb+0x2de/0x4e0
[ 2621.577655]  ? ip_frag_init+0x350/0x350
[ 2621.578078]  ? ip_frag_init+0x350/0x350
[ 2621.578500]  ? ip6_push_pending_frames+0xf0/0xf0
[ 2621.579025]  ? ip6_dst_hoplimit+0x199/0x440
[ 2621.579486]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.579935]  udpv6_sendmsg+0x20d0/0x2af0
[ 2621.580373]  ? ip_frag_init+0x350/0x350
[ 2621.580800]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.581351]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.581851]  ? lock_acquire+0x197/0x470
[ 2621.582271]  ? find_held_lock+0x2c/0x110
[ 2621.582718]  ? mark_lock+0xf5/0x2df0
[ 2621.583108]  ? sock_has_perm+0x1ea/0x280
[ 2621.583547]  ? __import_iovec+0x458/0x590
[ 2621.583989]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.584537]  inet6_sendmsg+0x105/0x140
[ 2621.584946]  ? inet6_compat_ioctl+0x320/0x320
[ 2621.585422]  sock_sendmsg+0xf2/0x190
[ 2621.585813]  ____sys_sendmsg+0x334/0x870
[ 2621.586243]  ? kernel_sendmsg+0x50/0x50
[ 2621.586667]  ? do_recvmmsg+0x6d0/0x6d0
[ 2621.587105]  ? perf_trace_lock+0xac/0x490
[ 2621.587558]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.588053]  ? perf_trace_lock+0xac/0x490
[ 2621.588499]  ___sys_sendmsg+0xf3/0x170
[ 2621.588918]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2621.589408]  ? __fget_files+0x26d/0x4c0
[ 2621.589834]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.590277]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.590733]  ? __fget_files+0x296/0x4c0
[ 2621.591163]  ? __fget_light+0xea/0x290
[ 2621.591584]  __sys_sendmmsg+0x195/0x470
[ 2621.592015]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2621.592477]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.592930]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2621.593438]  ? wait_for_completion_io+0x270/0x270
[ 2621.593946]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2621.594437]  ? vfs_write+0x354/0xa70
[ 2621.594840]  ? fput_many+0x2f/0x1a0
[ 2621.595227]  ? ksys_write+0x1a9/0x260
[ 2621.595631]  ? __ia32_sys_read+0xb0/0xb0
[ 2621.596063]  __x64_sys_sendmmsg+0x99/0x100
[ 2621.596515]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2621.597063]  do_syscall_64+0x33/0x40
[ 2621.597462]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2621.598000] RIP: 0033:0x7fef13252b19
[ 2621.598404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2621.600348] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2621.601146] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2621.601906] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2621.602671] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2621.603431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2621.604185] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:48:32 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x8000000, 0x0, 0x0, 0x0)

07:48:32 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:48:32 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0)

07:48:32 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 4)

[ 2621.678494] isofs_fill_super: get root inode failed
[ 2621.683901] FAULT_INJECTION: forcing a failure.
[ 2621.683901] name failslab, interval 1, probability 0, space 0, times 0
[ 2621.685227] CPU: 1 PID: 14951 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2621.685981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2621.686902] Call Trace:
[ 2621.687195]  dump_stack+0x107/0x167
[ 2621.687597]  should_fail.cold+0x5/0xa
[ 2621.688009]  should_failslab+0x5/0x20
[ 2621.688427]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2621.688964]  ? alloc_skb_with_frags+0x92/0x570
[ 2621.689459]  __alloc_skb+0xb1/0x5b0
[ 2621.689857]  alloc_skb_with_frags+0x92/0x570
[ 2621.690323]  ? lock_acquire+0x197/0x470
[ 2621.690758]  ? find_held_lock+0x2c/0x110
[ 2621.691191]  sock_alloc_send_pskb+0x7af/0x930
[ 2621.691668]  ? sk_alloc+0x350/0x350
[ 2621.692070]  ? perf_trace_lock+0xac/0x490
[ 2621.692520]  ? SOFTIRQ_verbose+0x10/0x10
[ 2621.692944]  ? lock_chain_count+0x20/0x20
[ 2621.693405]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 2621.693942]  ? ip6_mtu+0x1bb/0x3d0
[ 2621.694320]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.694777]  ? ip_frag_init+0x350/0x350
[ 2621.695202]  ? ip6_finish_output2+0x1fe0/0x1fe0
[ 2621.695687]  ? ip6_mtu+0x1e9/0x3d0
[ 2621.696063]  ? ip6_setup_cork+0xfb7/0x1740
[ 2621.696524]  ip6_make_skb+0x2de/0x4e0
[ 2621.696935]  ? ip_frag_init+0x350/0x350
[ 2621.697365]  ? ip_frag_init+0x350/0x350
[ 2621.697792]  ? ip6_push_pending_frames+0xf0/0xf0
[ 2621.698306]  ? ip6_dst_hoplimit+0x199/0x440
[ 2621.698771]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.699224]  udpv6_sendmsg+0x20d0/0x2af0
[ 2621.699680]  ? ip_frag_init+0x350/0x350
[ 2621.700106]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.700657]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.701160]  ? lock_acquire+0x197/0x470
[ 2621.701583]  ? find_held_lock+0x2c/0x110
[ 2621.702026]  ? mark_lock+0xf5/0x2df0
[ 2621.702430]  ? sock_has_perm+0x1ea/0x280
[ 2621.702889]  ? __import_iovec+0x458/0x590
[ 2621.703350]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2621.703908]  inet6_sendmsg+0x105/0x140
[ 2621.704326]  ? inet6_compat_ioctl+0x320/0x320
[ 2621.704795]  sock_sendmsg+0xf2/0x190
[ 2621.705196]  ____sys_sendmsg+0x334/0x870
[ 2621.705627]  ? kernel_sendmsg+0x50/0x50
[ 2621.706064]  ? do_recvmmsg+0x6d0/0x6d0
[ 2621.706473]  ? perf_trace_lock+0xac/0x490
[ 2621.706919]  ? __lockdep_reset_lock+0x180/0x180
[ 2621.707413]  ? perf_trace_lock+0xac/0x490
[ 2621.707858]  ___sys_sendmsg+0xf3/0x170
[ 2621.708276]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2621.708777]  ? __fget_files+0x26d/0x4c0
[ 2621.709221]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.709681]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.710134]  ? __fget_files+0x296/0x4c0
[ 2621.710577]  ? __fget_light+0xea/0x290
[ 2621.710998]  __sys_sendmmsg+0x195/0x470
[ 2621.711434]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2621.711902]  ? lock_downgrade+0x6d0/0x6d0
[ 2621.712352]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2621.712858]  ? wait_for_completion_io+0x270/0x270
[ 2621.713366]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2621.713857]  ? vfs_write+0x354/0xa70
[ 2621.714250]  ? fput_many+0x2f/0x1a0
[ 2621.714637]  ? ksys_write+0x1a9/0x260
[ 2621.715054]  ? __ia32_sys_read+0xb0/0xb0
[ 2621.715492]  __x64_sys_sendmmsg+0x99/0x100
[ 2621.715947]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2621.716488]  do_syscall_64+0x33/0x40
[ 2621.716881]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2621.717419] RIP: 0033:0x7fef13252b19
[ 2621.717814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2621.719758] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2621.720559] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2621.721309] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2621.722082] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2621.722865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2621.723636] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:48:32 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x87020000, 0x0, 0x0)

07:48:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x100)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:48:32 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:48:32 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x6000, 0x0, 0x0)

[ 2621.846438] isofs_fill_super: get root inode failed
07:48:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x6435, 0x0, 0x0)

07:48:48 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 5)

[ 2637.549637] FAULT_INJECTION: forcing a failure.
[ 2637.549637] name failslab, interval 1, probability 0, space 0, times 0
[ 2637.551266] CPU: 1 PID: 14978 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2637.551999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.552872] Call Trace:
[ 2637.553158]  dump_stack+0x107/0x167
[ 2637.553544]  should_fail.cold+0x5/0xa
[ 2637.553949]  ? create_object.isra.0+0x3a/0xa20
[ 2637.554439]  should_failslab+0x5/0x20
[ 2637.554845]  kmem_cache_alloc+0x5b/0x310
[ 2637.555289]  create_object.isra.0+0x3a/0xa20
[ 2637.555752]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2637.556287]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2637.556825]  ? alloc_skb_with_frags+0x92/0x570
[ 2637.557311]  __alloc_skb+0xb1/0x5b0
[ 2637.557707]  alloc_skb_with_frags+0x92/0x570
[ 2637.558173]  ? lock_acquire+0x197/0x470
[ 2637.558601]  ? find_held_lock+0x2c/0x110
[ 2637.559043]  sock_alloc_send_pskb+0x7af/0x930
[ 2637.559531]  ? sk_alloc+0x350/0x350
[ 2637.559939]  ? perf_trace_lock+0xac/0x490
[ 2637.560395]  ? SOFTIRQ_verbose+0x10/0x10
[ 2637.560849]  ? lock_chain_count+0x20/0x20
[ 2637.561303]  __ip6_append_data.isra.0+0x1c12/0x3a70
[ 2637.561861]  ? ip6_mtu+0x1bb/0x3d0
[ 2637.562250]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.562709]  ? ip_frag_init+0x350/0x350
[ 2637.563332]  ? ip6_finish_output2+0x1fe0/0x1fe0
07:48:48 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x0, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c0000, 0x0, 0x0)

[ 2637.563868]  ? ip6_mtu+0x1e9/0x3d0
[ 2637.564361]  ? ip6_setup_cork+0xfb7/0x1740
[ 2637.564811]  ip6_make_skb+0x2de/0x4e0
[ 2637.565208]  ? ip_frag_init+0x350/0x350
[ 2637.565628]  ? ip_frag_init+0x350/0x350
[ 2637.566061]  ? ip6_push_pending_frames+0xf0/0xf0
[ 2637.566561]  ? ip6_dst_hoplimit+0x199/0x440
[ 2637.567038]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.567485]  udpv6_sendmsg+0x20d0/0x2af0
07:48:48 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:48:48 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)

[ 2637.567914]  ? ip_frag_init+0x350/0x350
[ 2637.568438]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2637.569059]  ? __lockdep_reset_lock+0x180/0x180
[ 2637.569580]  ? lock_acquire+0x197/0x470
[ 2637.570025]  ? find_held_lock+0x2c/0x110
07:48:48 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x1, 0x3a, 0x6, @buffer={0x0, 0xaa, &(0x7f0000000040)=""/170}, &(0x7f0000000100)="78825683a60e30f15e56ed86db9c35944db460b087d65697400534f93c9448c69795a972698ed1e408828740995b7fab583aad6f7b40697ddef8", &(0x7f00000001c0)=""/1, 0x2a, 0x4, 0x3, &(0x7f0000000200)})
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2637.570478]  ? mark_lock+0xf5/0x2df0
[ 2637.571008]  ? sock_has_perm+0x1ea/0x280
[ 2637.571476]  ? __import_iovec+0x458/0x590
[ 2637.571932]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2637.572495]  inet6_sendmsg+0x105/0x140
[ 2637.572921]  ? inet6_compat_ioctl+0x320/0x320
[ 2637.573389]  sock_sendmsg+0xf2/0x190
[ 2637.573806]  ____sys_sendmsg+0x334/0x870
[ 2637.574239]  ? kernel_sendmsg+0x50/0x50
[ 2637.574681]  ? do_recvmmsg+0x6d0/0x6d0
[ 2637.575102]  ? perf_trace_lock+0xac/0x490
[ 2637.575563]  ? __lockdep_reset_lock+0x180/0x180
[ 2637.576059]  ? perf_trace_lock+0xac/0x490
[ 2637.576519]  ___sys_sendmsg+0xf3/0x170
[ 2637.576933]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2637.577440]  ? __fget_files+0x26d/0x4c0
[ 2637.577870]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.578337]  ? mark_held_locks+0x9e/0xe0
[ 2637.578772]  ? __fget_files+0x296/0x4c0
[ 2637.579237]  ? __fget_light+0xea/0x290
[ 2637.579661]  __sys_sendmmsg+0x195/0x470
[ 2637.580105]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2637.580569]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.581042]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2637.581554]  ? wait_for_completion_io+0x270/0x270
[ 2637.582089]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2637.582583]  ? vfs_write+0x354/0xa70
[ 2637.582999]  ? fput_many+0x2f/0x1a0
[ 2637.583389]  ? ksys_write+0x1a9/0x260
[ 2637.583809]  ? __ia32_sys_read+0xb0/0xb0
[ 2637.584241]  __x64_sys_sendmmsg+0x99/0x100
[ 2637.584710]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.585284]  do_syscall_64+0x33/0x40
[ 2637.585699]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
07:48:48 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000002200", 0x9e, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2637.586264] RIP: 0033:0x7fef13252b19
[ 2637.586819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.588889] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2637.589728] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2637.590512] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2637.591302] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2637.592087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2637.592863] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
[ 2637.645807] isofs_fill_super: get root inode failed
[ 2637.648121] FAULT_INJECTION: forcing a failure.
[ 2637.648121] name failslab, interval 1, probability 0, space 0, times 0
[ 2637.650920] CPU: 0 PID: 14994 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2637.652400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.654170] Call Trace:
[ 2637.654757]  dump_stack+0x107/0x167
[ 2637.655554]  should_fail.cold+0x5/0xa
[ 2637.656372]  ? create_object.isra.0+0x3a/0xa20
[ 2637.657365]  should_failslab+0x5/0x20
[ 2637.658186]  kmem_cache_alloc+0x5b/0x310
[ 2637.659088]  create_object.isra.0+0x3a/0xa20
[ 2637.660043]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2637.661144]  kmem_cache_alloc_trace+0x151/0x320
[ 2637.662158]  __io_queue_proc+0x262/0x5a0
[ 2637.663053]  ? io_poll_queue_proc+0x50/0x50
[ 2637.663998]  n_tty_poll+0xba/0x8f0
[ 2637.664774]  ? n_tty_ioctl+0x370/0x370
[ 2637.665620]  tty_poll+0x144/0x1c0
[ 2637.666376]  ? tty_release+0xe90/0xe90
[ 2637.667227]  __io_arm_poll_handler+0x399/0x9e0
[ 2637.668236]  __io_queue_sqe+0x52b/0x9d0
[ 2637.669098]  ? io_issue_sqe+0x7700/0x7700
[ 2637.669998]  ? io_poll_queue_proc+0x50/0x50
[ 2637.670933]  ? io_prep_rw+0x35c/0x1050
[ 2637.671774]  ? io_prep_rw+0x7f5/0x1050
[ 2637.672625]  io_submit_sqes+0x4461/0x85c0
[ 2637.673550]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2637.674617]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2637.675677]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.676563]  ? find_held_lock+0x2c/0x110
[ 2637.677443]  ? io_submit_sqes+0x85c0/0x85c0
[ 2637.678375]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2637.679427]  ? wait_for_completion_io+0x270/0x270
[ 2637.680472]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2637.681467]  ? vfs_write+0x354/0xa70
[ 2637.682276]  ? fput_many+0x2f/0x1a0
[ 2637.683091]  ? ksys_write+0x1a9/0x260
[ 2637.683914]  ? __ia32_sys_read+0xb0/0xb0
[ 2637.684797]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2637.685925]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.687056]  do_syscall_64+0x33/0x40
[ 2637.687862]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2637.688966] RIP: 0033:0x7f05f7ac5b19
[ 2637.689774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.693746] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2637.695402] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2637.696941] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2637.698495] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2637.700042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2637.701581] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:48:48 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0)

07:48:48 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 6)

07:48:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0)

[ 2637.748855] FAULT_INJECTION: forcing a failure.
[ 2637.748855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2637.750162] CPU: 1 PID: 15008 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2637.750902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.751787] Call Trace:
[ 2637.752080]  dump_stack+0x107/0x167
[ 2637.752469]  should_fail.cold+0x5/0xa
[ 2637.752886]  _copy_from_user+0x2e/0x1b0
[ 2637.753316]  __copy_msghdr_from_user+0x91/0x4b0
[ 2637.753807]  ? __ia32_sys_shutdown+0x80/0x80
[ 2637.754278]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2637.754832]  ? inet6_sendmsg+0xbd/0x140
[ 2637.755262]  ? inet6_compat_ioctl+0x320/0x320
[ 2637.755743]  ? sock_sendmsg+0x55/0x190
[ 2637.756165]  sendmsg_copy_msghdr+0xa1/0x160
[ 2637.756618]  ? do_recvmmsg+0x6d0/0x6d0
[ 2637.757037]  ? __lock_acquire+0x1657/0x5b00
[ 2637.757498]  ___sys_sendmsg+0xc6/0x170
[ 2637.757916]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2637.758404]  ? __lockdep_reset_lock+0x180/0x180
[ 2637.758897]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.759337]  ? lock_acquire+0x197/0x470
[ 2637.759761]  ? find_held_lock+0x2c/0x110
[ 2637.760196]  ? __might_fault+0xd3/0x180
[ 2637.760636]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.761086]  __sys_sendmmsg+0x195/0x470
[ 2637.761530]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2637.761989]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.762461]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2637.763000]  ? wait_for_completion_io+0x270/0x270
[ 2637.763533]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2637.764050]  ? vfs_write+0x354/0xa70
[ 2637.764467]  ? fput_many+0x2f/0x1a0
[ 2637.764880]  ? ksys_write+0x1a9/0x260
[ 2637.765298]  ? __ia32_sys_read+0xb0/0xb0
[ 2637.765748]  __x64_sys_sendmmsg+0x99/0x100
[ 2637.766212]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.766782]  do_syscall_64+0x33/0x40
[ 2637.767207]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2637.767772] RIP: 0033:0x7fef13252b19
[ 2637.768190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.770215] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2637.771062] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2637.771846] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2637.772627] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2637.773414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2637.774200] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:48:48 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb610d56d0dce14c2f280cb04009b6a7fd98b43b23b062706cea2196cf561fb42e865186a41d99ae07aebd1ef872072037efa830b"], 0x2a)

07:48:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c, 0x0, 0x0)

07:48:48 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x0, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:48:48 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)

[ 2637.851940] FAULT_INJECTION: forcing a failure.
07:48:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0)

[ 2637.851940] name failslab, interval 1, probability 0, space 0, times 0
[ 2637.853800] CPU: 1 PID: 15027 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2637.854526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2637.855413] Call Trace:
[ 2637.855704]  dump_stack+0x107/0x167
[ 2637.856103]  should_fail.cold+0x5/0xa
[ 2637.856509]  ? create_object.isra.0+0x3a/0xa20
[ 2637.856993]  should_failslab+0x5/0x20
[ 2637.857395]  kmem_cache_alloc+0x5b/0x310
[ 2637.857829]  create_object.isra.0+0x3a/0xa20
[ 2637.858296]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2637.858837]  kmem_cache_alloc_trace+0x151/0x320
[ 2637.859350]  __io_queue_proc+0x262/0x5a0
[ 2637.859787]  ? io_poll_queue_proc+0x50/0x50
[ 2637.860249]  n_tty_poll+0xba/0x8f0
[ 2637.860627]  ? n_tty_ioctl+0x370/0x370
[ 2637.861043]  tty_poll+0x144/0x1c0
[ 2637.861413]  ? tty_release+0xe90/0xe90
[ 2637.861846]  __io_arm_poll_handler+0x399/0x9e0
[ 2637.862340]  __io_queue_sqe+0x52b/0x9d0
[ 2637.862787]  ? io_issue_sqe+0x7700/0x7700
[ 2637.863246]  ? io_poll_queue_proc+0x50/0x50
[ 2637.863728]  ? io_prep_rw+0x7f5/0x1050
[ 2637.864146]  io_submit_sqes+0x4461/0x85c0
[ 2637.864630]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2637.865159]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2637.865704]  ? lock_downgrade+0x6d0/0x6d0
[ 2637.866139]  ? find_held_lock+0x2c/0x110
[ 2637.866590]  ? io_submit_sqes+0x85c0/0x85c0
[ 2637.867065]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2637.867644]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2637.868234]  ? trace_hardirqs_on+0x5b/0x180
[ 2637.868719]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2637.869318]  ? __io_uring_cancel+0x20/0x20
[ 2637.869786]  ? __x64_sys_io_uring_enter+0xd/0x1b0
[ 2637.870314]  ? __sanitizer_cov_trace_pc+0x4/0x60
[ 2637.870837]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2637.871420]  do_syscall_64+0x33/0x40
[ 2637.871835]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2637.872396] RIP: 0033:0x7f05f7ac5b19
[ 2637.872807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2637.874812] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2637.875672] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2637.876465] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2637.877260] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2637.878039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2637.878822] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:49:04 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)

07:49:04 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:49:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0)

07:49:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x200000000000000, 0x202400)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x401f9)
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000014192f4d3d000000554e6c5436a419379c21a5830dfa18850eb64466cb2a909b6a7fd98ba1288f0d616ab043b23b062706cea2190c7127e5a2710e112182e44531b3614e8839d9a26afc797db329b0d8fe8c191fcc37134fa1e81fa16d52ac80e5f4d3b19f7be2f6086bfd349ce556acf178361e06d50fd901eaec466522d8"], 0x2a)

07:49:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x600000, 0x0, 0x0)

07:49:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x40000000, 0x0, 0x0, 0x0)

07:49:04 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0x0, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:49:04 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 7)

[ 2654.219375] FAULT_INJECTION: forcing a failure.
[ 2654.219375] name failslab, interval 1, probability 0, space 0, times 0
[ 2654.222091] CPU: 0 PID: 15044 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2654.223486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2654.225162] Call Trace:
[ 2654.225712]  dump_stack+0x107/0x167
[ 2654.226464]  should_fail.cold+0x5/0xa
[ 2654.227258]  ? ___slab_alloc+0x360/0x700
[ 2654.228104]  ? create_object.isra.0+0x3a/0xa20
[ 2654.229033]  should_failslab+0x5/0x20
[ 2654.229808]  kmem_cache_alloc+0x5b/0x310
[ 2654.230653]  create_object.isra.0+0x3a/0xa20
[ 2654.231561]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2654.232606]  kmem_cache_alloc+0x159/0x310
[ 2654.233461]  skb_clone+0x14f/0x3d0
[ 2654.234193]  neigh_probe+0x54/0x110
[ 2654.234941]  __neigh_event_send+0x37c/0x1270
[ 2654.235888]  neigh_resolve_output+0x508/0x7f0
[ 2654.236806]  ? ip6_mtu+0x1bb/0x3d0
[ 2654.237591]  ip6_finish_output2+0xaaf/0x1fe0
[ 2654.238509]  __ip6_finish_output.part.0+0x4f7/0xb50
[ 2654.239547]  ip6_output+0x3b1/0x7f0
[ 2654.240304]  ip6_local_out+0xb4/0x1a0
[ 2654.241084]  ip6_send_skb+0xb7/0x350
[ 2654.241847]  udp_v6_send_skb+0x7aa/0x15b0
[ 2654.242710]  udpv6_sendmsg+0x2113/0x2af0
[ 2654.243558]  ? ip_frag_init+0x350/0x350
[ 2654.244382]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2654.245449]  ? __lockdep_reset_lock+0x180/0x180
[ 2654.246386]  ? perf_event_switch_output+0x7d0/0x7d0
[ 2654.247465]  ? lock_acquire+0x197/0x470
[ 2654.248279]  ? find_held_lock+0x2c/0x110
[ 2654.249137]  ? sock_has_perm+0x1ea/0x280
[ 2654.250026]  ? __import_iovec+0x458/0x590
[ 2654.250865]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2654.251932]  inet6_sendmsg+0x105/0x140
[ 2654.252718]  ? inet6_compat_ioctl+0x320/0x320
[ 2654.253614]  sock_sendmsg+0xf2/0x190
[ 2654.254368]  ____sys_sendmsg+0x334/0x870
[ 2654.255209]  ? kernel_sendmsg+0x50/0x50
[ 2654.256004]  ? do_recvmmsg+0x6d0/0x6d0
[ 2654.256798]  ? perf_trace_lock+0xac/0x490
[ 2654.257646]  ? __lockdep_reset_lock+0x180/0x180
[ 2654.258581]  ? perf_trace_lock+0xac/0x490
[ 2654.259455]  ___sys_sendmsg+0xf3/0x170
[ 2654.260244]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2654.261171]  ? __fget_files+0x26d/0x4c0
[ 2654.261973]  ? lock_downgrade+0x6d0/0x6d0
[ 2654.262886]  ? __fget_files+0x296/0x4c0
[ 2654.263737]  ? __fget_light+0xea/0x290
[ 2654.264549]  __sys_sendmmsg+0x195/0x470
[ 2654.265380]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2654.266258]  ? lock_downgrade+0x6d0/0x6d0
[ 2654.267147]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2654.268129]  ? wait_for_completion_io+0x270/0x270
[ 2654.269113]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2654.270058]  ? vfs_write+0x354/0xa70
[ 2654.270831]  ? fput_many+0x2f/0x1a0
[ 2654.271571]  ? ksys_write+0x1a9/0x260
[ 2654.272347]  ? __ia32_sys_read+0xb0/0xb0
[ 2654.273190]  __x64_sys_sendmmsg+0x99/0x100
[ 2654.274043]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2654.275098]  do_syscall_64+0x33/0x40
[ 2654.275859]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2654.276892] RIP: 0033:0x7fef13252b19
[ 2654.277646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2654.281316] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2654.282837] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2654.284306] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2654.285732] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2654.287177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2654.288607] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:49:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2654.315104] FAULT_INJECTION: forcing a failure.
[ 2654.315104] name failslab, interval 1, probability 0, space 0, times 0
[ 2654.317791] CPU: 0 PID: 15041 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2654.319215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2654.320875] Call Trace:
[ 2654.321412]  dump_stack+0x107/0x167
[ 2654.322153]  should_fail.cold+0x5/0xa
[ 2654.322923]  ? create_object.isra.0+0x3a/0xa20
[ 2654.323850]  should_failslab+0x5/0x20
[ 2654.324614]  kmem_cache_alloc+0x5b/0x310
[ 2654.325436]  create_object.isra.0+0x3a/0xa20
[ 2654.326317]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2654.327347]  kmem_cache_alloc_trace+0x151/0x320
[ 2654.328296]  __io_queue_proc+0x262/0x5a0
[ 2654.329114]  ? io_poll_queue_proc+0x50/0x50
[ 2654.329981]  n_tty_poll+0xba/0x8f0
[ 2654.330715]  ? n_tty_ioctl+0x370/0x370
[ 2654.331520]  tty_poll+0x144/0x1c0
[ 2654.332222]  ? tty_release+0xe90/0xe90
[ 2654.332986]  __io_arm_poll_handler+0x399/0x9e0
[ 2654.333904]  __io_queue_sqe+0x52b/0x9d0
[ 2654.334705]  ? io_issue_sqe+0x7700/0x7700
[ 2654.335543]  ? io_poll_queue_proc+0x50/0x50
[ 2654.336409]  ? io_prep_rw+0x7f5/0x1050
[ 2654.337198]  io_submit_sqes+0x4461/0x85c0
[ 2654.338063]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2654.339057]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2654.340052]  ? lock_downgrade+0x6d0/0x6d0
[ 2654.340883]  ? find_held_lock+0x2c/0x110
[ 2654.341713]  ? io_submit_sqes+0x85c0/0x85c0
[ 2654.342596]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2654.343578]  ? wait_for_completion_io+0x270/0x270
[ 2654.344546]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2654.345472]  ? vfs_write+0x354/0xa70
[ 2654.346224]  ? fput_many+0x2f/0x1a0
[ 2654.346955]  ? ksys_write+0x1a9/0x260
[ 2654.347731]  ? __ia32_sys_read+0xb0/0xb0
[ 2654.348551]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2654.349599]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2654.350635]  do_syscall_64+0x33/0x40
[ 2654.351406]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2654.352432] RIP: 0033:0x7f05f7ac5b19
[ 2654.353182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2654.356857] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2654.358383] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2654.359814] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2654.361240] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2654.362670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2654.364105] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:49:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

07:49:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

[ 2654.379444] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:49:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x76380000, 0x0, 0x0, 0x0)

07:49:04 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)

[ 2654.539223] FAULT_INJECTION: forcing a failure.
[ 2654.539223] name failslab, interval 1, probability 0, space 0, times 0
[ 2654.541935] CPU: 0 PID: 15075 Comm: syz-executor.7 Not tainted 5.10.194 #1
[ 2654.543323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2654.544997] Call Trace:
[ 2654.545537]  dump_stack+0x107/0x167
[ 2654.546286]  should_fail.cold+0x5/0xa
[ 2654.547055]  ? __io_queue_proc+0x262/0x5a0
[ 2654.547943]  should_failslab+0x5/0x20
[ 2654.548709]  kmem_cache_alloc_trace+0x55/0x320
[ 2654.549625]  ? _raw_spin_unlock_irqrestore+0x38/0x40
[ 2654.550655]  __io_queue_proc+0x262/0x5a0
[ 2654.551484]  ? io_poll_queue_proc+0x50/0x50
[ 2654.552360]  n_tty_poll+0xba/0x8f0
[ 2654.553075]  ? n_tty_ioctl+0x370/0x370
[ 2654.553862]  tty_poll+0x144/0x1c0
[ 2654.554564]  ? tty_release+0xe90/0xe90
[ 2654.555352]  __io_arm_poll_handler+0x399/0x9e0
[ 2654.556296]  __io_queue_sqe+0x52b/0x9d0
[ 2654.557108]  ? io_issue_sqe+0x7700/0x7700
[ 2654.557937]  ? io_poll_queue_proc+0x50/0x50
[ 2654.558803]  ? io_prep_rw+0x7f5/0x1050
[ 2654.559611]  io_submit_sqes+0x4461/0x85c0
[ 2654.560480]  ? __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2654.561479]  __do_sys_io_uring_enter+0x6b5/0x18a0
[ 2654.562454]  ? lock_downgrade+0x6d0/0x6d0
[ 2654.563286]  ? find_held_lock+0x2c/0x110
[ 2654.564110]  ? io_submit_sqes+0x85c0/0x85c0
[ 2654.564990]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2654.565958]  ? wait_for_completion_io+0x270/0x270
[ 2654.566934]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2654.567882]  ? vfs_write+0x354/0xa70
[ 2654.568633]  ? fput_many+0x2f/0x1a0
[ 2654.569365]  ? ksys_write+0x1a9/0x260
[ 2654.570142]  ? __ia32_sys_read+0xb0/0xb0
[ 2654.570958]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2654.572015]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2654.573048]  do_syscall_64+0x33/0x40
[ 2654.573796]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2654.574818] RIP: 0033:0x7f05f7ac5b19
[ 2654.575581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2654.579246] RSP: 002b:00007f05f503b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2654.580767] RAX: ffffffffffffffda RBX: 00007f05f7bd8f60 RCX: 00007f05f7ac5b19
[ 2654.582181] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004
[ 2654.583611] RBP: 00007f05f503b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2654.585035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2654.586455] R13: 00007fff977b440f R14: 00007f05f503b300 R15: 0000000000022000
07:49:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 8)

07:49:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)

07:49:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xc00c0000, 0x0, 0x0, 0x0)

07:49:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)

07:49:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

07:49:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
fsync(r1)

07:49:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff, 0x0, 0x0)

07:49:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0x0, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2668.382915] FAULT_INJECTION: forcing a failure.
[ 2668.382915] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.384652] CPU: 1 PID: 15101 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2668.385412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2668.386321] Call Trace:
[ 2668.386617]  dump_stack+0x107/0x167
[ 2668.387013]  should_fail.cold+0x5/0xa
[ 2668.387428]  ? __alloc_skb+0x6d/0x5b0
[ 2668.387850]  should_failslab+0x5/0x20
[ 2668.388261]  kmem_cache_alloc_node+0x55/0x330
[ 2668.388749]  ? lock_acquire+0x197/0x470
[ 2668.389183]  __alloc_skb+0x6d/0x5b0
[ 2668.389580]  ? __ipv6_chk_addr_and_flags+0x3a5/0x680
[ 2668.390120]  ndisc_alloc_skb+0x134/0x320
[ 2668.390554]  ndisc_send_ns+0x177/0x860
[ 2668.390971]  ? pndisc_redo+0x20/0x20
[ 2668.391399]  ? ipv6_chk_addr_and_flags+0x37/0x50
[ 2668.391919]  ndisc_solicit+0x2cd/0x470
[ 2668.392359]  ? ndisc_send_ns+0x860/0x860
[ 2668.392819]  ? __skb_clone+0x586/0x770
[ 2668.393263]  ? ndisc_send_ns+0x860/0x860
[ 2668.393729]  neigh_probe+0xc4/0x110
[ 2668.394140]  __neigh_event_send+0x37c/0x1270
[ 2668.394635]  neigh_resolve_output+0x508/0x7f0
[ 2668.395142]  ? ip6_mtu+0x1bb/0x3d0
[ 2668.395551]  ip6_finish_output2+0xaaf/0x1fe0
[ 2668.396055]  __ip6_finish_output.part.0+0x4f7/0xb50
[ 2668.396616]  ip6_output+0x3b1/0x7f0
[ 2668.397028]  ip6_local_out+0xb4/0x1a0
[ 2668.397453]  ip6_send_skb+0xb7/0x350
[ 2668.397868]  udp_v6_send_skb+0x7aa/0x15b0
[ 2668.398329]  udpv6_sendmsg+0x2113/0x2af0
[ 2668.398784]  ? ip_frag_init+0x350/0x350
[ 2668.399226]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2668.399819]  ? __lockdep_reset_lock+0x180/0x180
[ 2668.400343]  ? lock_acquire+0x197/0x470
[ 2668.400794]  ? find_held_lock+0x2c/0x110
[ 2668.401251]  ? mark_lock+0xf5/0x2df0
[ 2668.401662]  ? sock_has_perm+0x1ea/0x280
[ 2668.402131]  ? __import_iovec+0x458/0x590
[ 2668.402595]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2668.403171]  inet6_sendmsg+0x105/0x140
[ 2668.403606]  ? inet6_compat_ioctl+0x320/0x320
[ 2668.404105]  sock_sendmsg+0xf2/0x190
[ 2668.404513]  ____sys_sendmsg+0x334/0x870
[ 2668.404965]  ? kernel_sendmsg+0x50/0x50
[ 2668.405400]  ? do_recvmmsg+0x6d0/0x6d0
[ 2668.405834]  ? perf_trace_lock+0xac/0x490
[ 2668.406291]  ? __lockdep_reset_lock+0x180/0x180
[ 2668.406809]  ? perf_trace_lock+0xac/0x490
[ 2668.407283]  ___sys_sendmsg+0xf3/0x170
[ 2668.407718]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2668.408223]  ? __fget_files+0x26d/0x4c0
[ 2668.408654]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.409119]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.409679]  ? __fget_files+0x296/0x4c0
[ 2668.409705]  ? __fget_light+0xea/0x290
[ 2668.409721]  __sys_sendmmsg+0x195/0x470
[ 2668.409736]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2668.409747]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.409771]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2668.409784]  ? wait_for_completion_io+0x270/0x270
[ 2668.409798]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2668.409809]  ? vfs_write+0x354/0xa70
[ 2668.409822]  ? fput_many+0x2f/0x1a0
[ 2668.409833]  ? ksys_write+0x1a9/0x260
[ 2668.409844]  ? __ia32_sys_read+0xb0/0xb0
[ 2668.409860]  __x64_sys_sendmmsg+0x99/0x100
[ 2668.409870]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2668.409881]  do_syscall_64+0x33/0x40
07:49:18 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000001580)={0x53, 0xfffffffffffffffe, 0x1000, 0x81, @scatter={0x7, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f00000011c0)=""/4, 0x4}, {&(0x7f0000001200)=""/220, 0xdc}, {&(0x7f0000001300)=""/62, 0x3e}, {&(0x7f0000001340)=""/148, 0x94}]}, &(0x7f0000001e00)="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", &(0x7f0000001480)=""/130, 0x100, 0x0, 0xffffffffffffffff, &(0x7f0000001540)})
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0xff, 0x6, 0x3f, 0x0, 0x7, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x4, 0x6e636890}, 0x1100, 0xffffffff80000001, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0x1a)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2668.409894]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2668.409901] RIP: 0033:0x7fef13252b19
[ 2668.409913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
07:49:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff, 0x0, 0x0)

07:49:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)

07:49:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}, {@utf8}]})

[ 2668.409919] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2668.409931] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2668.409938] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
07:49:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xcb030000, 0x0, 0x0, 0x0)

[ 2668.409944] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2668.409951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2668.409957] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:49:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0)

[ 2668.410024] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
[ 2668.434609] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
[ 2668.569730] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:49:19 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0x0, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:49:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 9)

[ 2668.649885] FAULT_INJECTION: forcing a failure.
[ 2668.649885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2668.652446] CPU: 0 PID: 15140 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2668.653851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2668.655566] Call Trace:
[ 2668.656137]  dump_stack+0x107/0x167
[ 2668.656889]  should_fail.cold+0x5/0xa
[ 2668.657689]  _copy_from_user+0x2e/0x1b0
[ 2668.658517]  ____sys_sendmsg+0x6c6/0x870
[ 2668.659367]  ? kernel_sendmsg+0x50/0x50
[ 2668.660191]  ? do_recvmmsg+0x6d0/0x6d0
[ 2668.660989]  ? __lock_acquire+0x1657/0x5b00
[ 2668.661890]  ___sys_sendmsg+0xf3/0x170
[ 2668.662684]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2668.663641]  ? __lockdep_reset_lock+0x180/0x180
[ 2668.664581]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.665445]  ? lock_acquire+0x197/0x470
[ 2668.666258]  ? find_held_lock+0x2c/0x110
[ 2668.667106]  ? __might_fault+0xd3/0x180
[ 2668.667922]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.668813]  __sys_sendmmsg+0x195/0x470
[ 2668.669635]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 2668.670525]  ? lock_downgrade+0x6d0/0x6d0
[ 2668.671421]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2668.672418]  ? wait_for_completion_io+0x270/0x270
[ 2668.673399]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2668.674357]  ? vfs_write+0x354/0xa70
[ 2668.675131]  ? fput_many+0x2f/0x1a0
[ 2668.675896]  ? ksys_write+0x1a9/0x260
[ 2668.676671]  ? __ia32_sys_read+0xb0/0xb0
[ 2668.677520]  __x64_sys_sendmmsg+0x99/0x100
[ 2668.678382]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2668.679451]  do_syscall_64+0x33/0x40
[ 2668.680213]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2668.681246] RIP: 0033:0x7fef13252b19
[ 2668.682005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2668.685708] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2668.687257] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2668.688697] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2668.690150] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2668.691594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2668.693025] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:49:31 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
getpgid(r3)
r4 = perf_event_open$cgroup(&(0x7f0000001800)={0x2, 0x80, 0x3f, 0x3, 0x6, 0x0, 0x0, 0x3, 0x8018, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040)}, 0x1, 0x7, 0x4, 0x2, 0x9, 0x7, 0x6, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r0, 0x0)
perf_event_open(&(0x7f0000001780)={0x5, 0x80, 0x8, 0x8, 0x7, 0x1, 0x0, 0x9, 0x94a8, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xe6, 0x2, @perf_config_ext={0x0, 0x2}, 0x18570, 0x1fe0000, 0x800, 0x2, 0x30755458, 0x8000, 0x8000, 0x0, 0x9, 0x0, 0x2}, r3, 0x3, r4, 0x1)
r5 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r5, &(0x7f00000016c0)=ANY=[@ANYBLOB="0380000003001f0001000000554e6c54360eb6050000f561fb42e865830b0000047373e15448c84b6ef66a327aa26fb3bce20fe27880f6f76f8fab92e04ce48ac82cfde1f1ced0b194bd56b7eb709891e07f7a306f57634bda61a818ad487312357638c25deac80937c36d2768181cdffa7666f1647f929b54065ec4e34ee172ab3b02d4cb09e5b8b2351643988ff071591f24a97a59c18a892891e184d4e49b5c28c10dc639732c98ffe6a68626"], 0x30)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r6)
write$binfmt_aout(r6, &(0x7f00000018c0)=ANY=[@ANYRESDEC=r2], 0x126)
read(r6, 0x0, 0x0)
writev(r6, &(0x7f0000001680)=[{&(0x7f0000001440)="9519cd01196e1406878c8cf0f6b4a9aeebd8c0d95f75ac39823bdc06d97a946e6cf5c7128b76d0e18c41eb2d3f40219c3f9ac5060adcfb3262b23cc48d6e0948551209c8ff5eb48a071f663aea5c3687ac37cd4b38482f2525dd851618a621f41dda1b2b29c6f94a06cf3e36ac803a898d3c34b59caeaf7a8af948de2765af7818bef0da54db664bc73d", 0x8a}, {&(0x7f0000001500)="69070ea153b33fcd6de217637bd5db883e8f7d6707750d01850af583ce6f2bd045b72147b82c17ccc482632052138d9db5844c4ddc0aa6b54a092ed36a93bec97be611336ef71037d65aac722388da86dfc704ae51d45abc7e37c255bb2d602404e1d846b0cdad4ecd8d2aeff04df3bea1", 0x71}, {&(0x7f0000001580)="0cefeec34595711b0fa53140cb3f388c9be165443e324138af401e6fc5e7c5df03ebaa3c61058a266ab097140240e78364b24b46a07efd9319cea9b9f8ee000b694af5034453df6e3adec2174935ef17b799c6023c11026380626b7afb8e8001b02ab2e4a80299089582ad2c9e5a43ab19238815c4f9e43e577fada1f8b9b7b6", 0x80}, {&(0x7f0000001600)="e93d2d9993a0284f7d2b6fbf412a4ddc670e4070e58ffed9265deda89fc3078665f792a40069f62215f61ef10d54cbce31f113eba6953b497ec668a8dc5c7e4c6f10765f58112febc5aebe63669e781a991bf857c8ffe27ff8445e40", 0x5c}], 0x4)
r7 = socket(0xb, 0x800, 0x2)
writev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)="125669e34c3fd6ba1fe9b4acc5f929f0f34858ba4f036aa180d28e9226058bc289f129bf282e9637ac8c6057de4e8b9cc3785ae082521cb6", 0x38}, {&(0x7f0000000300)="6ecbfb611e65fc9c51fba4e6e51feb16b24b8bbcc166965dbd27f81be58408bff3586cb49ccab22f60cf5e87de7b425d8e473f9ef6a890a567055196c60114fe7d77e37f5f32a313dea240bb2879af710d6b0cf3dbf17ffee72cba74e26aa9475a4dad01235c", 0x66}, {&(0x7f0000000380)="c89316d3e33c26d7ef1cf632e48219c0b8938c3fdbfe2fa597c27f7ba666f5a628e9ab7da0771821b7af79a7badf73c91955eedbbba04e93bbcaa9071a209e16506b1d8f7d54b5fa1ea1bb5a257867734005de13678404f17129ea0e65594fc445d079f3a11746737dc88ac386b7ed05fb67da26101d445abf5c58035e686b3af4670b51f888bf4f7d4ac9a69781d5dd130b78c7eb7487a4661a42a0cb7edde21db1d9dedf6f44ae0c71fe9c40b3a0ea3924fdb63dd182c35d0527f9f5b87e24226ec0548f9697b60e2e86011c646ac96ba2b128a73f9564b8cfb81d61db64640be8784daf286f44b1ae849bb8861c59314fc0d81a87d02e4a4764c6696ad8d4d7111204e11d529cb0236e6919280497ea990e6a232706d02d6c2ca24cbd3c8d508b517a38f5ac7bb6bc563c36a3872c9e3e54d098aab241ab53d123d50a328d5b7b1dfe8baa22e557a708ccbf83a0a91ababc6221cf0d10d42b6d198556fc8704f184415fc22cd465bcceb50ebbbc15cd75f1a5cea4e91d5c2dfde9ee1df457e3748cb02f86d08a82c18704a1642bb0f36c6383b598e96c5b9fc6aeb87b6c09c69ecb7f78e820571f6b36fbc146a5b46b6b6cc5647a6b649ac9a911f2a996ed290fde1da0f17d47bd87f51b414e73ce278c1041261e29bebb9af110f3452392f801d95eb4089773b3446c7b95bbbce6b6279f001a15963a3f12cce99755d818fe1834dfc4303a1cb90709cb5cc727ffccf2f6970da011ab0865c0391c4988d3f6727889ac81b64e0fcc62d533f12441dee651538f3773235f361b89e04a812a6c5a67ce800ab81d4e9f2ec3a2d3f25e47cf5e88a7d204709359ca650e7b7a683d308e9f9f48a6fd2cca5e519c9e16b41a91315f3f8e68c496e438741b0361e5fe78f3911de6c5a1ccd5d5b8c961e70dadd24f47507e1a8b542bc8a2253f7b7c1c10fbe1d76b92070e16f9eb261fefac0fa5b133047cda9180097a9b54100aea85e45f0eddabeee82d248c30c8dfaf92550436ee3be44c3da3158a5384ad89673532de08c9e66da70885408992c923379d71c8c5d33cacfd8ef6e437fa739eda978f067e6f5fc4a2ac3daf0c9d383f113cfcce71b146f49721e000ff83daeb4a6d8d46862da4571fda8f67dc9d8613f376a79a20c941e56e1dc8e9c4b0975530295734017bff7b24d1e3d1d410fda3b2792c33815550380265b265972e7aa8c9705ad440a6fa6fb59401c3e48d121364014c9ab2c7a518d469596daa0fd82b66406c0c6a55ec0a1f80ed216e17a22f002353488c3ccf2871f49ef9aac3fbef4289cad1dbf1736472335df88725c5e99536d8731db0e57b66337b307e4223a7f49e93e711f63051404e4ebe88561125d760768a2eb2c7c84a152b0e7a4dbd379307e1b465750b6fcefe2b1a2cb8b05d7cd398b593a0b353c846ce33f804fed2ead569f141adf393cb69c4f1a67e9f27094504556bf9dac45f6b554fa1b5342569211b1a6e632e8eb11f16fc414df6a812d77ecf6da4576212b9cb9f5a22c0190cf550054f2860b599b289437f806c7e0c58c9574e171139ba379ecd682ae815a2cbad0cf8b2906cf20a6f7dc15f567974bc67f1e1e0b7a6771a553be02e16e609d77ad646337df428a1cc2ea09c34190a4d92bf9ba1c90f69559c7702b899cc9c5a8b21c896f4ed761022619b7eb65a3612e85379aef6e4f7cbfec206029f2d27c5c478126557e3a73191cdcd1d59d8c285d0f3269f5ef5e82586c3d98bb8f624505308a71578689520ebe3d7dc34cbe465572904e48f97c3fac7cd406c332c798dcf798dfe33ba61df40ba5a18f3aae28f869df5bd888513d5e36045b68889aceda4123216e7c2f184f885188165c67b6d570a5553af6c31c7a96a80efd75dde44b686995411fe6a98f955312345f7b77dbe15d98bd45e448f96c13df21e46159b5e47c7addcb3e5f8e7aa6ba069fa529e991fbd3ea6288ed30a6e019b4aa0e70203ed1f8537d780078231d866420a5cb1719a9f8818ec11f08b90df38f264436181943b9a1cede14d267187ff5c4c45c88e0c7719cff7532975ba8f162680cb90e628fa731dab78f98fe3501916042f74607640b87e2b4c019e3bdca548c0182f913a4912aa7e76d646f5db7cbbb81a7798df45773de95c331995a7d2cc7754af36321b774802ca21f24ef20555c8635201ec2a727a9aeddd10bffd7dbfe74875769893260fc8d362936bb657dc60e92377d2c4f9de31d81c9273d3d5b8f8cd5d21bd7f61c27e6b5de2d622304c533177fa49274ca7da4539ccf25930f62fcd206effc3cc1fa0c708813c3fdd1a278c1af1ca40a1713b1f3b4788609fc6d31c6eb90883eccd5847a4cf4cbcf7445c7765d1709276e84a904ca7dc5398804effacb7c1c2003db29e9b340a114bb6febc0cb9d0ab4cd4d6257f1b8f9b7015fe17f3d586bf0786c102c2a73619e5909b3c3282c809b21a95c6cd346f1167ff1fdba94aa7a9beaca7cd19303fd711bf520daaef2ddb122214d3124d48ae74485713a59961763a65b4f97f95b5135d2d02893d02afe0125c3fcdc8e3f95192337d8e28ca1352815522cb7eaadddc5655826d19699d37f21bf7ed5a266df76f4d00b03d2c1fe73c627452c3ff695007a09c5d248726a10ff88679322a2242555dc6e100f187485a0608ba86f3260a4ddad8bf54bd64bd4b513376ab69c7f3c866c614312c23e0276462c018c15f0ac565414073780f5b3358ff1ff10e4f3b935523a12dec6ac4a47552e28aa1d900999037ccbec2904c975e8141355d72fd2f92cc9a1b54807d8800bace0c2a8630046b679db01393c5653014940c31a8d26486779d3f1fa14e41899b9c48ff0cd654715bd14d44e92fc2aabe9858aa0f78c97502b48f3e2ac7f7ff0462fa83d5480bc18e20a2b2107b4532b8dd6f3a24cc3addf8937065fd23fdbed4395dab3412679762f1ef9f0bccd0aca2236ab9878225166eb1fe53b2b0e27091cd334f02e9b2276777491c72972526bfa76c59a63c1c7ff54c9456a29ee911c2a76c801d28981ec018e2ed1bfac2f5f3e6ca45f1a4ca34234e36ec518acc1325950a161f1ecf2950ea8c03f11dbf593d7e528c9435c2be339f6231f8701eb1c35c02c7308088e7869a9b7713b66c7fbb8bae7cfb09f7c85d583bbd855c6c38268ac3729d4f18561ee68be59521efc420f516958a26f6d887d656b9967f92be77b96359eda017c1fedd6fb0b218368c19e7442553a556a37108880e07ea6c75485acc63bb5b2fc8310f6d5fea779bce25847d8a1e465d09d882f52871180106347b84a6540a5cd51a2a15396faf3d9284a26ecdbd9b1187720c3b9649c979787abb54aa919841772418a02b2fc4d3f644a31b7cfe77320a3b0d10ab92acfcd9203e3c216d04691f09324f4437b4fa29df8b8a65d2b05b15ade8e3f6409c50e5c07290a72247fa4da13db7d32443a5c4007fbc770e8f6bcfda8d17aceb2d8033ac017ebcdd9cd55f1c582689d20869a42af587240986dd4ec8878b23c06ebd7539417fd58748e4cf88b2169f7ad0ae9faed1f38a6566b6df6b4f13afc5bd86528439b6759f508c3819fb4e6515c9d791de68c7b29581f53a622cc9d975568e886fa4891d25ec368e702fca185b9e48eeb77db73e61eaeefc624c64eddd7277569d32af04ba23b1c5a7899588edd748169a41ac2d78b890d473594ab787b038d82fcda27aa3110c6d59c05025c50b733710d26564225b0d442bb357cbf327c4d8583f27f0c40938c12addbf2126d7deb5b68f7961eea7e162b379984c673572cf623d37bf783947be069c87efc31149f3082b2b182a475e68fea091698406b4379134cfbe61c1b7d34723aa894311543fda185a25f8fa1bcbabb0afc827bc1a2b4b9676a54ca1a49d67aa75a61d8363b05b0387707a527d081dbe9e672a47e3d335b9e813a8358f06c9f85304cd8417c3d1d7c54baa620fc0d77c2c47d6337b9bede030f8321d687bd4fea3dd90e1d549141e2085261cb594e6abec5075c7d76f787af0558e79410de2ee31f90fcc36974cb3c7392bb1fb399bfd422c088095c0cffe9a9acd90798fb2e209fccfbd3d52c073f2f520fab57e76e1ce570f3281bc92dc3521bf51233f54991242428ff5e95dd6c94537221310432006303a28de13303b35cd6b4a7dfb8cc8b308fca5c7f772d10af45a89c1bacb4232d1b83c89c3ae5dd5bdb06cbe82819fccc02d58fcf8dbadb1cd3594cbf2e058cf3c353fea747e173ac729621924fefbf4e67d22e6f9b7d6fc4855a8b752864ba1b5426e682423ecaba9b8759f1f45d591c2abcf0be452f131f7a213056994e0a43f324db8c3c45093a3e780c22b18fe05ff4f3fd7a59075053a7e106c31036021644b4d560f8b94f3a8cd0bec3d46fd4b6720236686416b0456bb4458ac5cf59ef7b6951fbad10328678ab7ea1534e96357f6df11742996b12f1cc3cadcbb7cbc7f535d46acf64a9117e2578825ad41fa2af65820383a4a1b970bae4d868cb886efb4b9e5921c0cdb8469e8e7ba9ad9a9f307833e7954dd69ae86fc1ff155d7803ab8357ef7c4144bae0667f71a7a1b67f8dd2c74999514c1f718beb0ea35d96abfe7f1305537029e76d76d55f6d09f7af51414f5a104f778286f0bc4cd9e97475c1bf0f14936ee9574829c67beee0e3b64c78b61714f4f04d5f016dd9ec0d63e16c85f069d1821af92b859e64d8d3e69e851868c93dc1e758b9d024c6edcc7c72cbc696b223c061a51db23add4db78063fe8affeb21212056efb4b130afbe46576ae04f69b3f297eac8b4b4b21a4b0f96b7ccd59f192964ed3c99977c2916131398a717aff54598fe44d843f9fdb5f594c6029a75bca17cfb83497eb6fd19a916ff1cec798b22a9fa9104cbb3075bdb196bceb513146e3460635652282b8dd06b1749d430e77ef78373e008bd2d35fd44ff8f6873f6bb6096ca8bbe56dfc4973772a5ee90675cb3681493cfe0583481bac4edddb8d2b0148d598ea7e9916d6cfb51ef22725dd39c5e473ed075195519f4301e3e7631a41e2f0fe4356320021dff4a0504f10ce240cb441af985f3e8c976b6ec557e24ac9efe527844cc7a55c7b9f283bfa0baa16e69feeb7274b69d1ae444fa26322f8384f6ffa937533207d2e49ad50d3219ebdbcbde39b6a59df8da71045bae8488d702121c091b4df0249f02bb934901d41253a35548bc590c09661807862160b745a930df4b9b642fffdc3a59ab73832efbec09dc320d5326d1c01b19258540904b6815bed68f9182613b5672bdca622346f4bd0bd207a566c1c35fc9185116ca5281e94fa09dd464e90de27ad3ea27e89fcceebc431e093aef6736acf4a9624509162412f97c38abd0a37d066346ff79a0686b1be80a51973bfcad7385d6b7b0346e84be193de5d28158c587880dbac7866efe957f55ed14e6819bc2114e9e5258f1c2573f29ace38a84b7e5d9e1a8fe4e83fc6537d7a1c6620528fb31dddfe02233f56abb284c5e2b02eca3540ec9a118eadd10c615164425be1f5d50fc22370a293add4c1392a301da46f6f4c58006a3d03d97aa6de421d6c3141b246c86c3cb7b1d738a0f9a15787c31eeae38553128eab6f30a18e91ba063cab5499694a45f52cbbe8d72ad117d292b0b588f3943283630ca6388a9dc8207e313585cd38b98242146a35e20bb89e55c06d0b8566c6340c6c1939a9b8a5a7dc3f5154996c9659b40283b0a1b12d3f65653897e3484ff03a738eeac838486fa1f4bbb865b6dbe00cbc16e0035ef679", 0x1000}, {&(0x7f0000001380)="7c6be36a7c7e274c6c65b2bcfd65844e00bf466381d398a43d635a1ac2e0441a0a1b5fb05b10656171f71e1654559a5b382c45912cbed8b1d11690f235d57082da43bb38c707b243b2041a1682f42fad1ca406dbf37eab1562945185214f8245241f91477d57d45c6d2177b6c7891234c62ea2ca", 0x74}], 0x4)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="26651782dc525abdf4af39a893548f56d1f588a77d53f4c6596f094aa02e4a1efaf0a6e62bc0d881a79e054ea4979c181b9b4f55fd5aa513975ed96e7523e2391807e75607ecc1eb23c41ad5f8e4b453e24930b4c7fb440e3cf3142fbb65883d2e86c128e778489da6033a224da44de72859cf57b196adaab99c3c3351e8c66547c838aa128ef71ad61a4d7f99", 0x8d}, {&(0x7f0000000180)="d353a0c8c45307298778", 0xa}], 0x2)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="6b000000250000007f000000251b0a3a298a9b22aa2d5052199162c810b0ee8297c4eb3e23b7687f0b036a51449251b95ad90dcc5e2a31832091b17e624c5ba8cf744ba5caff5563c50830202cda02d2d6e904000000963d69dd7824d50976b24628012bac9d05c344b878fb78639f60ac0c217ce412e3"])

07:49:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)

07:49:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, 0x0)

[ 2680.894615] sg_write: data in/out 875837202/252 bytes for SCSI command 0x0-- guessing data in;
[ 2680.894615]    program syz-executor.4 not setting count and/or reply_len properly
[ 2680.896441] FAULT_INJECTION: forcing a failure.
[ 2680.896441] name failslab, interval 1, probability 0, space 0, times 0
[ 2680.897787] CPU: 1 PID: 15157 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2680.898490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2680.899409] Call Trace:
[ 2680.899697]  dump_stack+0x107/0x167
[ 2680.900222]  should_fail.cold+0x5/0xa
[ 2680.900659]  should_failslab+0x5/0x20
[ 2680.901045]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2680.901550]  ? ndisc_alloc_skb+0x134/0x320
[ 2680.901988]  ? lock_acquire+0x197/0x470
[ 2680.902402]  __alloc_skb+0xb1/0x5b0
[ 2680.902778]  ndisc_alloc_skb+0x134/0x320
[ 2680.903201]  ndisc_send_ns+0x177/0x860
[ 2680.903622]  ? pndisc_redo+0x20/0x20
[ 2680.904016]  ? ipv6_chk_addr_and_flags+0x37/0x50
[ 2680.904504]  ndisc_solicit+0x2cd/0x470
[ 2680.904902]  ? ndisc_send_ns+0x860/0x860
[ 2680.905317]  ? __skb_clone+0x586/0x770
[ 2680.905719]  ? ndisc_send_ns+0x860/0x860
[ 2680.906135]  neigh_probe+0xc4/0x110
[ 2680.906510]  __neigh_event_send+0x37c/0x1270
[ 2680.906965]  neigh_resolve_output+0x508/0x7f0
[ 2680.907436]  ? ip6_mtu+0x1bb/0x3d0
[ 2680.907831]  ip6_finish_output2+0xaaf/0x1fe0
[ 2680.908321]  __ip6_finish_output.part.0+0x4f7/0xb50
[ 2680.908870]  ip6_output+0x3b1/0x7f0
[ 2680.909276]  ip6_local_out+0xb4/0x1a0
[ 2680.909703]  ip6_send_skb+0xb7/0x350
[ 2680.910111]  udp_v6_send_skb+0x7aa/0x15b0
[ 2680.910571]  udpv6_sendmsg+0x2113/0x2af0
[ 2680.911020]  ? ip_frag_init+0x350/0x350
[ 2680.911475]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2680.912049]  ? __lockdep_reset_lock+0x180/0x180
[ 2680.912571]  ? lock_acquire+0x197/0x470
[ 2680.913008]  ? find_held_lock+0x2c/0x110
[ 2680.913460]  ? mark_lock+0xf5/0x2df0
[ 2680.913870]  ? sock_has_perm+0x1ea/0x280
[ 2680.914327]  ? __import_iovec+0x458/0x590
[ 2680.914781]  ? udp_v6_push_pending_frames+0x360/0x360
[ 2680.915357]  inet6_sendmsg+0x105/0x140
[ 2680.915773]  ? inet6_compat_ioctl+0x320/0x320
[ 2680.916251]  sock_sendmsg+0xf2/0x190
[ 2680.916646]  ____sys_sendmsg+0x334/0x870
[ 2680.917081]  ? kernel_sendmsg+0x50/0x50
[ 2680.917502]  ? do_recvmmsg+0x6d0/0x6d0
[ 2680.917928]  ? perf_trace_lock+0xac/0x490
[ 2680.918386]  ? __lockdep_reset_lock+0x180/0x180
[ 2680.918892]  ? perf_trace_lock+0xac/0x490
[ 2680.919351]  ___sys_sendmsg+0xf3/0x170
[ 2680.919772]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2680.920272]  ? __fget_files+0x26d/0x4c0
[ 2680.920685]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.921152]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.921579]  ? __fget_files+0x296/0x4c0
[ 2680.922027]  ? __fget_light+0xea/0x290
[ 2680.922433]  __sys_sendmmsg+0x195/0x470
[ 2680.922990]  ? __ia32_sys_sendmsg+0xb0/0xb0
07:49:31 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x0, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:49:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 10)

07:49:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0)

07:49:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:49:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0)

[ 2680.923533]  ? lock_downgrade+0x6d0/0x6d0
[ 2680.924067]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2680.924574]  ? wait_for_completion_io+0x270/0x270
[ 2680.925109]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2680.925593]  ? vfs_write+0x354/0xa70
[ 2680.926012]  ? fput_many+0x2f/0x1a0
[ 2680.926384]  ? ksys_write+0x1a9/0x260
[ 2680.926802]  ? __ia32_sys_read+0xb0/0xb0
[ 2680.927226]  __x64_sys_sendmmsg+0x99/0x100
[ 2680.927716]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2680.928291]  do_syscall_64+0x33/0x40
[ 2680.928700]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2680.929255] RIP: 0033:0x7fef13252b19
[ 2680.929662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2680.931654] RSP: 002b:00007fef107c8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2680.932480] RAX: ffffffffffffffda RBX: 00007fef13365f60 RCX: 00007fef13252b19
[ 2680.933255] RDX: 0000000000000002 RSI: 00000000200012c0 RDI: 0000000000000004
[ 2680.934026] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2680.934795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2680.935585] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
[ 2680.936470] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb
[ 2680.954652] sg_write: data in/out 102002165/86 bytes for SCSI command 0x8b-- guessing data in;
[ 2680.954652]    program syz-executor.4 not setting count and/or reply_len properly
07:49:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, 0x0)

07:49:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:49:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0) (fail_nth: 11)

07:49:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0)

07:49:31 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x0, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2681.042471] FAULT_INJECTION: forcing a failure.
[ 2681.042471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2681.044027] CPU: 1 PID: 15179 Comm: syz-executor.5 Not tainted 5.10.194 #1
[ 2681.044718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2681.045536] Call Trace:
[ 2681.045809]  dump_stack+0x107/0x167
[ 2681.046175]  should_fail.cold+0x5/0xa
[ 2681.046562]  _copy_from_user+0x2e/0x1b0
[ 2681.046961]  kstrtouint_from_user+0xbd/0x220
[ 2681.047415]  ? kstrtou8_from_user+0x210/0x210
[ 2681.047873]  ? lock_acquire+0x197/0x470
[ 2681.048271]  ? ksys_write+0x12d/0x260
[ 2681.048661]  proc_fail_nth_write+0x78/0x220
[ 2681.049092]  ? proc_task_getattr+0x1f0/0x1f0
[ 2681.049528]  ? __fget_files+0x296/0x4c0
[ 2681.049932]  ? proc_task_getattr+0x1f0/0x1f0
[ 2681.050370]  vfs_write+0x29a/0xa70
[ 2681.050730]  ksys_write+0x12d/0x260
[ 2681.051116]  ? __ia32_sys_read+0xb0/0xb0
[ 2681.051535]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2681.052073]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2681.052587]  do_syscall_64+0x33/0x40
[ 2681.052978]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2681.053484] RIP: 0033:0x7fef132055ff
[ 2681.053877] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2681.055691] RSP: 002b:00007fef107c8170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2681.056464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef132055ff
[ 2681.057204] RDX: 0000000000000001 RSI: 00007fef107c81e0 RDI: 0000000000000006
[ 2681.057940] RBP: 00007fef107c81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2681.058682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2681.059436] R13: 00007ffdafbb7d2f R14: 00007fef107c8300 R15: 0000000000022000
07:49:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0)

07:49:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0)

07:49:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, 0x0)

[ 2681.719089] sg_write: data in/out 875837202/252 bytes for SCSI command 0x0-- guessing data in;
[ 2681.719089]    program syz-executor.4 not setting count and/or reply_len properly
[ 2681.723179] sg_write: data in/out 102002165/86 bytes for SCSI command 0x8b-- guessing data in;
[ 2681.723179]    program syz-executor.4 not setting count and/or reply_len properly
07:49:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:49:46 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:49:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)

07:49:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x2, 0x0, 0x0)

07:49:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x15020000, 0x0, 0x0)

07:49:46 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}]})

07:49:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x0, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:49:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800006}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@void, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x26)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080))

07:49:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:49:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
syz_io_uring_setup(0x17e3, &(0x7f0000000040)={0x0, 0x3fd6, 0x8, 0x0, 0xbe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7f922d6878d559d93d0bdb61d59724e0e6d98b43b2830b000000000000000000000000000033919518d493adfce382c15c591d53e669378369e29ed7518a6815db33e66f81fa113d703e7cf150e3dfb10bb084e20943df0cf8353112b3b8f3096d28b2c64d469cf44c838d69fd05e5549edf7ebda96360d3a0b08ba3d86100699883be775d06e729e20000000000"], 0x2a)

07:49:46 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}]})

07:49:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x0, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:49:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:49:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x5, 0x0, 0x0)

07:49:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)

07:49:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x2, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:49:46 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
dup2(r0, 0xffffffffffffffff)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x2, 0x0, 0x0, 0x0)

07:50:00 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@session={'session', 0x3d, 0x4e}}]})

07:50:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r2)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x126)
read(r2, 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xbd1, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:01 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x5935000000000000, 0x0, 0x0)

07:50:01 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x3, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0)

07:50:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x8, 0x0, 0x0)

07:50:01 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x0, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:01 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x4, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:01 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@utf8}]})

07:50:01 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x0, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:01 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r3 = dup(r0)
ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000040))

07:50:01 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0)

07:50:01 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x8702000000000000, 0x0, 0x0)

07:50:01 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x3cb, 0x0, 0x0)

07:50:15 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:15 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x500, 0x0, 0x0)

07:50:15 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x0, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)

07:50:15 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x64350000, 0x0, 0x0)

07:50:15 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x5, 0x0, 0x0, 0x0)

07:50:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x8, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:15 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@nocompress}, {@utf8}]})

07:50:15 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x8, 0x0, 0x0, 0x0)

07:50:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xe, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:15 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xcc0, 0x0, 0x0)

07:50:15 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000240)=0x5, 0x4)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r3)
write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0x126)
read(r3, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000280)={{0xcc, 0x0, 0x4, 0x245, 0x37a, 0xfff, 0x25f, 0x7}, "7099ebba4be20293eb2545a910e7bd795c6b7961081a313969d20575653bc3f15dfe00635e6bfc37b9feedff99caf7856e0fe41b77d56dcfb7478709069c614c07ceb538287c37eb52dc0160d2aa20bf3a21a33fa66f05d00dd4ee706d462df2489ed693dd58facda1cfbcb12bfbbd36da283b3b804bea37eb079cc01dc6e63a87e83dc0720ac8fb2d76d63d14066336f71b3bdd59db1868b6ef7f34ceddb00f33d80fd1f689d53d09b9a9b74f00d0589bbc34276a743eeef34449c01e7663de914f1856eda254bcb74b49c2aa54a047231db47dde1369b4c29f71317b99cef7f2695ae443450f17cb1263db6954c40acc5a6315b55f8eafca2e113e48c66d678ab1268fd87dad23fe5c1e8ec96fc1b10d8f4aa7566620b4ce58eb669c231e3c3ef813402bd8982eca5544e449e431d64f8299b6925d90b1699a695c55e76a035c16e1eb6ba432f76ca47ebedcf05d23de6695b657e3abf2ef013a5717ee69931f5bf6f5d15638c85c3b4979d38abeca318a4518a5df265098456528a615e4bcbae5ff511772c792e8846e757217d4d0a57f418802b6da7c9d7ea373276be761453ab1c92a712dddba0b2e21b48ff2e77cc6aa4e5ee16c253c8474aea4bf77999cf8cddf078a20948b08f96a58351b6a2764494fdfe99d63df476eca4afcc90ec17d0d39dfd205c93358adccad7e53fa6a89e0b4e97d5b63b1c94c3937f27a4f9a750acd8a9238220d70510ab280aa16e03a14462853b2b439a176392a6e20be74eee4295178b8634edfa900b5dbde9e2c0f144b8c6396e7876e21a68574ed73229114c4367b7ece9412f25532a1824f017d3505aa75a448d91c1d784b9907cdbdc920e1995977971734aa4b3ed567c6ff99bdff0f0290a19b61b1aeb4977c1cc931eea384a216e04e8545fff29e9a53cb9e00762685417fda6f8d7412d463dc9f5bb86a0539a22c599ede751d482b2183e87a573930423ab1a87b9c67e1823a86525988a659ae0df5f9369faa61f552c1d8334e2af1c10b9c27c816303f70a2536424bc59a7e5cad9b68583d1ad33c129fc5a6714f73abbb9b38d7ba95e8d86d3795bd63dbfba641d5a809b39074b160ccf9c7442c8812c6756306f81165f3b66f99102e87c0f69ff8364218dcab544dc286bc23cba2c7b03c011249a83d3d00787f358919c7b62faea498bfa497eb9ce86a6c923c42b49fca6513a1b9f080d01280d0d825799a2a5f8aae6e70d4a155d08707648ba0d45ef039b476e5c11a5bf12d9e8d8a8315bf6df46fb93e66dcb9e62e880001553807ab8e29ae75da1f769ac8a6b1b597cad23592e696570f7424235120f4eb02b912e93f5f66487db4a7d7ade4bae71f89e76fa224f2726acb3c5cb6aff67cda947535b21dcb58e1eb037c1294bc0f284aa900a9d3b2d050f152295ed2673332483487c29aceeb90f78fbdac685d941d4f5c6e7d4410b9b45094d7ec7bab7aae5f7e99108255bb1a1e80edaaea4fe625d0c3460c088a59c80879fb04871ec86e0efb06e4eaf1d57d876c2e9614a95418460d3b08cbea2ed7e3d5ae83bddd5ecff2c2b4624817e7599192fd854315c5be738b94eb003bbc5b6e948156e3560340cd3441c31d45408ccbe044231c2ee011e5c24980351234cfb3eb5d35d664c6f8fb8c91886cb6f8059905db3271efc7fe4e7926c0d143b6aaca3749fb235e0bfa256c941d17a036c3db40c6317ac69c54843c6d8de34cbcb4edbe33a79ed4d3e13930027a8d6e6a34375e5b36eefa17eaef8cc985b147a50e1e94e373750d102725e1a1d7fb00f91e1af70dbfff26015607d2127f247f419da92617532ffb51b7c869d42833c238dd6cb5ca6076e1366b7dbf11f31b387510363c04228d996c06efa34fd77f1c7153fd4ebc46da219d250baa535f11f5c511801721c517642d0fd3d14602c351c307452b6b5be799d90501c87ace25d89c98ba5e8cc4c96f9dd884e8fe9be32191b011ce3da1857b2709e0b56a83dbf9e0a4da8e76f046d7d1b7c211c36bc9dd4f61d03c5a92cee02c7d18aa313a48114ee3a2817047d4ae328c8e18ee3a728b44477adcc81ad358d7a61484e7428b9874d829bbc7dd96066760a374661204d91dd710dedbd2352967e9a0a7346223cbd546fe2d8cd346f04f4fe28b0af3242721c474b96d9a352aa4db096b74887e42006d424e482ea4da38ca78e11171d56cfd064570d3fc0e070aebaf280c091aa63d0419b97c6a66e3cbdad0a3613fce741a5013b24ea8ee9cc1a6bfe05d138a5f7d72a6269d8eae0d63d559936cfe2e0d96cca13dc38a22ab816c5c425e9a237d16239c1d17e707623828739ae90d13d0e2ab19a8097704bf857eabcae507263cf9aa2a0cc2b4b04dd92604f7aa5575b1677800f9249ba9aaf017c50d1a8f45f8b533377eb018701db02f4fdd0c79422f6ae076a006b35d9a6ca61822f3fe763ee6b2dc0c33bb70e69994da56480487cc1530c86dded3fc86184d22fcf4ab3439a8c1b26e14b2370c126366322fa1192bc17e4cc95ffec31efe9dc9195bec46eac1ec0bcea480e84114da379d789c28b515ebbe087fc2e5413ebd06d66f04ce9221dab4892872d0e1f8442ba1a2997784ea645264f05b647edeab67aa391277738238f4f725c3a5feb3f78851c84814736d9869b3d69cb4bf636bb76c12916d7fab3ff2b890e375746349d6306a926c6c5a72e9568d8ec83ddda5d7859e043598e128e71dca971060c66511eba26423a790e6e8d6439ce64d62e4c05846cc5b4ac2e79f22ce3bffc6aad3f91b1fdde118fffa6ea2da97b24912b1f7ba9b3241deb8254f0364d022fb62e18f16cee71017ef087119adb92697e08a5a34ea240e7870ffcf3f6e25bbce4dea5ef658ce78739b78fe1d00d3a253892b0d977c67b2681f73ffcd01249cf59b7ca6b743de778b224cc8c3e987d9bfe7395f2eeff424ad9d3f9775d615c95ca1e2217cf873eddc7932b9905b6d9c48cb98eb5013d6554ccbd881ef48375bb3cec12662ad5d499937f6f252915aee5ad9bd530cda468a24e0bfd6b1e28b76ed79dc4cc8ede80e5a75e0b0c6b4aeea80501271d23985489970642c55c0e4728418be5948b55c885ff904db25c6b923e21776557f0f2cb3911a371d8664f1aa4a22bc783d5674c9e217742552bce0d77132f71657a5434b074c9c077689d209ea71965ce0b7bf133489d1cd488a798fb86a1ebc741de51409c2190543ce6e070fcde571f49a6fe575f071f8e3cb07c0bbe602f77985aec72db6d2f7ae3570e15282c8f81a10be972d489613f6805ecf09aba3af9aa5ca0d6e3e0e48fc8f5a6e7354b19fa73367c049de55ad6659c29be1a9d4ef26182cad86ae3ba0ce428269aeac31db1af12d0226bb18a1d1de0b464a4197da825ee4380b8543b5a6d3899c0325115acb9902fba0009eb84674d7cca59a70b2bbddac8a20353a69d9399580e2c47bb4147ba11a22fdd2d91cb13563412f7068826b3cc00a88ee0c00e97ca7d7d99fd81db723a0212983fae42319a10da5da289adeb3e465120a2cb64632654acb092780fa01bfa57a25f284f5521fd790492beae4ed48046d60ff97dfaaea561d8bfa6ee8418cb4f0baff58d0b4ab79e49e4dc8b0e5bab86d8fa4c71fcade6b9fef1e174766c7b7281585c245e7ba04047a83835c629d4f5287a978c6a35a31fb3aba6e71b5d1fc66bf17e6b5a5f25efdaef679cb31e031399d950b9c1590d9dc08cb37f490a048ff9c48a1a1e4e5e2d9a9d94782b395119aaae5a3067b00e1c6e84f2e50c66f6a485e07af2ebd39833c74403abfbda088efa8149e6c4e346e87cbedab2fbb88f362eecab536c5de5c8bbfdbd7fad0edd60b8fb211540ce9220255e305efa4d607f18b309d6bd7c771952c9ca254414880d10035dd7f99f72ad9f2a31672dd1e6a45c2c0e15530c2c55d3ceb611632ab2009a67bb37967e62895e981d1376d3d31093896b641039cf1dc630af98b9bd2a6fc0e31545a8afece366ccb943d8ac7c22c82e251b7f74c0162b636c35a927e04432f8c0fa45fc22b9a615b3b426fa727111fd033f2565bc440b7aed85395cf94056bf2e644bca5b0447f9380e9a0b7d0a3328160135cd186ecc37240e6bbce671bf74a8e12834768bbc1c3ea0619e0dda7be916601c574ac956682f4e86e24ad68814a86f98d208e34dc1b73a27ff78eee8d0e7e60f82fde4366f205d7cd32272f03bd1d47a0747a8e56cadcf4fd07a8fead51802caa573ab9ece831ea27a06b4bb722141707eaec92eff835b55fe1491f9956bab53c4f919b8cae70c30d0d4394bfac0a76e6139741115167022065a8f2e2c32cf8dcb90598fe7bed1e0777c62f05498022e8db7691a480b21d3bbd0c2ae6f2547dfb88a4a86ef7aa5811efe9cc494938841d32071a9a3730c51a37e82a35b48151b4276274c64c40288a64049810a7afeedcac79503b168719d05ab04ef4c4d39af0269a5e923854669469155047f9913ae1c87165fadac9b7ae72e67c91b99065dc974be33f55105ca3593365513768096c076fd75fd504baca5a8b6c8078003cebec2e2d2b55e6b582a1312c8388aa83f1d1fbe70eaee696881631c377b55f023d834e2467ae4d909a1ea243d45067fb3d8c1e13090b38f85981f8b9535640c1508b2760d32aa7e355d8c0e12427b2f8e9aad75d8937ce2c4bf060326f64e2d045329f471ce94c47f0067128a5042739e20ebb6b7bf45b91f40f79415f92a567ea6a70a32e56d4f355bc9e1c50c461fe751662974b757a77767c35ac9d3aae6956d28f33f60b5d63703a419ea5f93de947eccd5c069783bd65cb7d4d2ec6f8a37bce78ec5b349222fc7746ce80591f5e99ce5d072a3665df3e56859842a9a18876e33b27acbe355c25a2b61608a15de0380831bd3e7a977ff3ca7a53358529be65204817862828aa7a6e5ff75f66ccbce2ac209dc0ac3f976d534463adf3abf76578becf695f95a264ef22290df5d7e249964f1fe841b4577177c650e53a623d7fea2184a5fdf3972d06fa7a03da5fdde1debff38c46cd17ead4c74dff9288bb18c7ee4e4f9f1f9b6e732f73ef8cbc8344cfb0f601f9ee494f98f52e8a3520c1911cb8a853bdee73325f4b206363b9ad42d6fd609b640c24e4aedc27630b899e3e06b1ff35bc387774ba10f558a7a1848cee2390856d0d8dd9193d2451d2e20a925d75bbc7f3b58b252bfa7286bee9e18ee2601d6d0d41cdeff8a22db0e4c71ad73e66cbfec48e87cf1822dee17b3dceca7e0dc56edd834f940ddcfbda8a0312079a8cf7f98e9321e3f8528b0ae563f66ade70832e1d3208f53abd54cc3301bce38d0ab2c61512c3f072b39c6d3f2e8dcfd6eea99a230734154b5bc3e29e6bb47995897e64f8ae57b0b4dd17884d43ce34dfb17169aaa8cdf1a8637af204174bba100beb49730c5fc92c015ad69a268a8d14befced363597a1903697293e8eea1692e428944f8a7857e1ecd97ee2306e5daf3fc1a38ca638052b189e86b4350a386a47c08b3347520da590005f1604634915544b3703d88477e4fc806a3b77f6b72c253079c1a50d844a31e238790cc4095db8f1b02385a99a9e7d4a152c26d44bff958e643200a78a7e04f2f212d33c3149c5a231793bf50404c4c0098fe484a149b1f3c0bc40f389e5ac72e508734afed4f6839f8d3bf8fd51358151f398efc4d3cacbb7c0303e803bf94dadeb919b7b408424e93bf4412a761af6460ec7a560fb0e8b67df8f2ce6cb615475407ea3bcbb42b7e90c7892223b0812acb1f"}, 0x1020)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@cache_fscache}, {@posixacl}], [{@measure}]}})

07:50:15 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]})

07:50:15 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c0000, 0x0, 0x0)

07:50:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)

[ 2724.997325] sg_write: data in/out 545/4082 bytes for SCSI command 0x4b-- guessing data in;
[ 2724.997325]    program syz-executor.4 not setting count and/or reply_len properly
07:50:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)

[ 2725.037466] sg_write: data in/out 781768711/246 bytes for SCSI command 0x6b-- guessing data in;
[ 2725.037466]    program syz-executor.4 not setting count and/or reply_len properly
[ 2725.088441] sg_write: data in/out 545/4082 bytes for SCSI command 0x4b-- guessing data in;
07:50:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x11, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2725.088441]    program syz-executor.4 not setting count and/or reply_len properly
07:50:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)

07:50:15 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x0, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:15 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x56, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:32 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:50:32 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x33f, 0x0, 0x0, 0x0)

07:50:32 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x0, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:32 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)

07:50:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cc2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"], 0x2a)

07:50:32 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x60, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:32 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0)

07:50:32 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
getpgid(r3)
r4 = perf_event_open$cgroup(&(0x7f0000001800)={0x2, 0x80, 0x3f, 0x3, 0x6, 0x0, 0x0, 0x3, 0x8018, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040)}, 0x1, 0x7, 0x4, 0x2, 0x9, 0x7, 0x6, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r0, 0x0)
perf_event_open(&(0x7f0000001780)={0x5, 0x80, 0x8, 0x8, 0x7, 0x1, 0x0, 0x9, 0x94a8, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xe6, 0x2, @perf_config_ext={0x0, 0x2}, 0x18570, 0x1fe0000, 0x800, 0x2, 0x30755458, 0x8000, 0x8000, 0x0, 0x9, 0x0, 0x2}, r3, 0x3, r4, 0x1)
r5 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r5, &(0x7f00000016c0)=ANY=[@ANYBLOB="0380000003001f0001000000554e6c54360eb6050000f561fb42e865830b0000047373e15448c84b6ef66a327aa26fb3bce20fe27880f6f76f8fab92e04ce48ac82cfde1f1ced0b194bd56b7eb709891e07f7a306f57634bda61a818ad487312357638c25deac80937c36d2768181cdffa7666f1647f929b54065ec4e34ee172ab3b02d4cb09e5b8b2351643988ff071591f24a97a59c18a892891e184d4e49b5c28c10dc639732c98ffe6a68626"], 0x30)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r6)
write$binfmt_aout(r6, &(0x7f00000018c0)=ANY=[@ANYRESDEC=r2], 0x126)
read(r6, 0x0, 0x0)
writev(r6, &(0x7f0000001680)=[{&(0x7f0000001440)="9519cd01196e1406878c8cf0f6b4a9aeebd8c0d95f75ac39823bdc06d97a946e6cf5c7128b76d0e18c41eb2d3f40219c3f9ac5060adcfb3262b23cc48d6e0948551209c8ff5eb48a071f663aea5c3687ac37cd4b38482f2525dd851618a621f41dda1b2b29c6f94a06cf3e36ac803a898d3c34b59caeaf7a8af948de2765af7818bef0da54db664bc73d", 0x8a}, {&(0x7f0000001500)="69070ea153b33fcd6de217637bd5db883e8f7d6707750d01850af583ce6f2bd045b72147b82c17ccc482632052138d9db5844c4ddc0aa6b54a092ed36a93bec97be611336ef71037d65aac722388da86dfc704ae51d45abc7e37c255bb2d602404e1d846b0cdad4ecd8d2aeff04df3bea1", 0x71}, {&(0x7f0000001580)="0cefeec34595711b0fa53140cb3f388c9be165443e324138af401e6fc5e7c5df03ebaa3c61058a266ab097140240e78364b24b46a07efd9319cea9b9f8ee000b694af5034453df6e3adec2174935ef17b799c6023c11026380626b7afb8e8001b02ab2e4a80299089582ad2c9e5a43ab19238815c4f9e43e577fada1f8b9b7b6", 0x80}, {&(0x7f0000001600)="e93d2d9993a0284f7d2b6fbf412a4ddc670e4070e58ffed9265deda89fc3078665f792a40069f62215f61ef10d54cbce31f113eba6953b497ec668a8dc5c7e4c6f10765f58112febc5aebe63669e781a991bf857c8ffe27ff8445e40", 0x5c}], 0x4)
r7 = socket(0xb, 0x800, 0x2)
writev(r7, &(0x7f0000001400)=[{&(0x7f00000002c0)="125669e34c3fd6ba1fe9b4acc5f929f0f34858ba4f036aa180d28e9226058bc289f129bf282e9637ac8c6057de4e8b9cc3785ae082521cb6", 0x38}, {&(0x7f0000000300)="6ecbfb611e65fc9c51fba4e6e51feb16b24b8bbcc166965dbd27f81be58408bff3586cb49ccab22f60cf5e87de7b425d8e473f9ef6a890a567055196c60114fe7d77e37f5f32a313dea240bb2879af710d6b0cf3dbf17ffee72cba74e26aa9475a4dad01235c", 0x66}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="7c6be36a7c7e274c6c65b2bcfd65844e00bf466381d398a43d635a1ac2e0441a0a1b5fb05b10656171f71e1654559a5b382c45912cbed8b1d11690f235d57082da43bb38c707b243b2041a1682f42fad1ca406dbf37eab1562945185214f8245241f91477d57d45c6d2177b6c7891234c62ea2ca", 0x74}], 0x4)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="26651782dc525abdf4af39a893548f56d1f588a77d53f4c6596f094aa02e4a1efaf0a6e62bc0d881a79e054ea4979c181b9b4f55fd5aa513975ed96e7523e2391807e75607ecc1eb23c41ad5f8e4b453e24930b4c7fb440e3cf3142fbb65883d2e86c128e778489da6033a224da44de72859cf57b196adaab99c3c3351e8c66547c838aa128ef71ad61a4d7f99", 0x8d}, {&(0x7f0000000180)="d353a0c8c45307298778", 0xa}], 0x2)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="6b000000250000007f000000251b0a3a298a9b22aa2d5052199162c810b0ee8297c4eb3e23b7687f0b036a51449251b95ad90dcc5e2a31832091b17e624c5ba8cf744ba5caff5563c50830202cda02d2d6e904000000963d69dd7824d50976b24628012bac9d05c344b878fb78639f60ac0c217ce412e3"])

[ 2741.724326] sg_write: data in/out 875837202/252 bytes for SCSI command 0x0-- guessing data in;
[ 2741.724326]    program syz-executor.6 not setting count and/or reply_len properly
07:50:32 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2741.798933] sg_write: data in/out 102002165/86 bytes for SCSI command 0x8b-- guessing data in;
[ 2741.798933]    program syz-executor.6 not setting count and/or reply_len properly
07:50:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x3876, 0x0, 0x0)

07:50:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffff8000, 0x0, 0x0)

07:50:46 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x0, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:46 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x500, 0x0, 0x0, 0x0)

07:50:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)

07:50:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r2)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0x126)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xe, r4, 0x1)
read(r2, 0x0, 0x0)
copy_file_range(r1, &(0x7f0000000040)=0x10040, r2, &(0x7f0000000080)=0x8, 0x8, 0x0)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfc, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040))
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x300, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x287)

07:50:46 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x3f00, 0x0, 0x0)

07:50:46 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:46 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffc000, 0x0, 0x0)

07:50:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x75)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:50:46 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x0, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:50:46 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x5dc, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:50:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xcc0, 0x0, 0x0, 0x0)

07:50:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x4000, 0x0, 0x0)

07:50:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)

07:51:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x2000, 0x0, 0x0, 0x0)

07:51:00 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0)

07:51:00 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)

07:51:00 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x105b00)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
read(r2, &(0x7f0000000040)=""/5, 0x5)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54360eb60466cb2a909b6a7fd98b43b23b062706ce1e4e97dd7ffb42e865830b"], 0x2a)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
r5 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r5)
write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0x126)
read(r5, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r7 = dup(r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x96)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000080)=[r4, r5, r0, r3, r1, r2, r1, r7]}, 0x8)
r8 = dup(r3)
ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0x96)
fallocate(r8, 0x5, 0x6, 0x5)

07:51:00 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xe00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x7638, 0x0, 0x0)

07:51:00 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x1100, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xc00c, 0x0, 0x0)

07:51:00 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:51:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
getpgid(r2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r3=>0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000100)=0x80)
kcmp(r2, r3, 0x1, r0, r4)
r5 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r5, &(0x7f00000001c0)={@void, @val={0x1, 0x0, 0x4, 0x3f, 0x7, 0x400}, @x25={0x2, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x30)

07:51:00 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x60000000000000, 0x0, 0x0)

07:51:00 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 1)

[ 2769.756364] FAULT_INJECTION: forcing a failure.
[ 2769.756364] name failslab, interval 1, probability 0, space 0, times 0
[ 2769.758167] CPU: 1 PID: 15556 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2769.759230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2769.760572] Call Trace:
[ 2769.761000]  dump_stack+0x107/0x167
[ 2769.761593]  should_fail.cold+0x5/0xa
[ 2769.762219]  ? __do_sys_memfd_create+0xfb/0x450
[ 2769.762978]  should_failslab+0x5/0x20
[ 2769.763594]  __kmalloc+0x72/0x390
[ 2769.764165]  __do_sys_memfd_create+0xfb/0x450
[ 2769.764904]  ? ksys_write+0x1a9/0x260
[ 2769.765505]  ? memfd_file_seals_ptr+0x170/0x170
[ 2769.766220]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2769.767023]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2769.767810]  do_syscall_64+0x33/0x40
[ 2769.768405]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2769.769220] RIP: 0033:0x7f281ca21b19
[ 2769.769811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2769.772681] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2769.773847] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2769.774950] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2769.776046] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2769.777158] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2769.778256] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x5600, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2782.024325] FAULT_INJECTION: forcing a failure.
[ 2782.024325] name failslab, interval 1, probability 0, space 0, times 0
[ 2782.025583] CPU: 1 PID: 15586 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2782.026272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2782.027094] Call Trace:
[ 2782.027367]  dump_stack+0x107/0x167
[ 2782.027737]  should_fail.cold+0x5/0xa
[ 2782.028120]  ? create_object.isra.0+0x3a/0xa20
[ 2782.028576]  should_failslab+0x5/0x20
[ 2782.029007]  kmem_cache_alloc+0x5b/0x310
[ 2782.029417]  create_object.isra.0+0x3a/0xa20
[ 2782.029851]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2782.030356]  __kmalloc+0x16e/0x390
[ 2782.030712]  __do_sys_memfd_create+0xfb/0x450
[ 2782.031156]  ? ksys_write+0x1a9/0x260
[ 2782.031533]  ? memfd_file_seals_ptr+0x170/0x170
[ 2782.032005]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2782.032524]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2782.033044]  do_syscall_64+0x33/0x40
[ 2782.033419]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2782.033923] RIP: 0033:0x7f281ca21b19
[ 2782.034305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2782.036176] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2782.036964] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2782.037696] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2782.038439] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2782.039171] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2782.039913] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:12 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x3b48, 0x0, 0x0, 0x0)

07:51:12 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x6000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:12 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xcb03, 0x0, 0x0)

07:51:12 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3559)

07:51:12 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 2)

07:51:12 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="009fa2777d0000f3f7b4e45b31bf8f1d00000000554e6c54360eb64466cbe52a909b6a7fd98b43b23b062706cea26e3bd24a1004ffaef445e47dd668ba2df54427f305aff55b9f3c9f1f8efd56291d09c2317c1fe4788c15d502e1ea7b7dcd4a6c8e6a561299e3e2d8135160d602f1b2116f2044b9dbd6c2a90100000000000051"], 0x2a)

07:51:12 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:51:12 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x80fe, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:12 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 3)

[ 2782.114622] FAULT_INJECTION: forcing a failure.
[ 2782.114622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2782.115849] CPU: 1 PID: 15603 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2782.116757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2782.117590] Call Trace:
[ 2782.117939]  dump_stack+0x107/0x167
[ 2782.118421]  should_fail.cold+0x5/0xa
[ 2782.118921]  _copy_from_user+0x2e/0x1b0
[ 2782.119435]  __do_sys_memfd_create+0x16d/0x450
[ 2782.120018]  ? memfd_file_seals_ptr+0x170/0x170
[ 2782.120488]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2782.121175]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2782.121696]  do_syscall_64+0x33/0x40
[ 2782.122178]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2782.122693] RIP: 0033:0x7f281ca21b19
[ 2782.123171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2782.125075] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2782.126040] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2782.126791] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2782.127702] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2782.128609] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2782.129391] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x6, 0x1, 0xbf, 0x20, 0x0, 0x400, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x230, 0x7, 0x8, 0x2, 0x6, 0xfffffff9, 0x4, 0x0, 0x4, 0x0, 0x30}, 0x0, 0x0, r1, 0x3)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = signalfd4(r1, &(0x7f0000000280)={[0x8]}, 0x8, 0x800)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
r4 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r4, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
writev(r4, &(0x7f00000013c0)=[{&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000040)="1cb5e14a0565a367380303d8f06e192bc1680f8241a82d37605aa337b04b8f52cf08a02f09a9c0b0350c55070c1fca65d84d7c565cbc59072822817cd3ba5855397489b9c6d1f4c8e795d4dd4d93e134c000f4d7ed93dd3e98a527e1858d4a041438499873562324d112bc24ee5ea101c610bd3cefd45b24fd1ffeb203b6f09f52aa58b275b3cf2947663085e2d79a", 0x8f}, {&(0x7f00000011c0)="3bd123609e6b4a03f7f1999f1ba23597f9d115eae637c7f1896d7f33d8c19bf96d4e586045683de3caed9bb915158189e1324aeaf323a0838f2902231037792596035e45fa325aeaf830deafaeddb1c1f6e7a12db1565f938d26502c0c1ada0d9a87d9098230b140bb514572b303af19ee998172fd06902c5e0829838e74492e2729792d0f8ae98e35203d", 0x8b}, {&(0x7f0000000100)="b6", 0x1}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001280)="11b3fa777fe931c991c27719e101d32a9f2461103db3ca5d464ab1db6d5919af3186cf3dddee55827f19d42678f3dddb48285b7f30d3ec17ecd0df9fdd72b688707c8c98e871fccaca77e80efc", 0x4d}, {&(0x7f0000001300)="ce898a78145b4c0c0065cda62e4fbff067b82a95231d", 0x16}, {&(0x7f0000001340)="e0778a3ec41ffbebfc8d1ad60a1aba3b5b49d1bae8a749e2235e7c89d51ed84d32136dc5cf530101ac0daa49bd34f8fe0c79fc525ab041abecc47edcfc4bc6a1ee74c341158efd4b3623381a4da6019b44bb3e1ea7b532d0ca1b08e5205752da7746f613381fb35f39604c5ec63b649af528f921abdf6f148d57d14efd", 0x7d}], 0x8)

07:51:12 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 4)

07:51:12 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xc0fe, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:12 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x800000, 0x0, 0x0)

[ 2782.208111] FAULT_INJECTION: forcing a failure.
[ 2782.208111] name failslab, interval 1, probability 0, space 0, times 0
[ 2782.209291] CPU: 1 PID: 15618 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2782.210184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2782.211249] Call Trace:
[ 2782.211544]  dump_stack+0x107/0x167
[ 2782.211908]  should_fail.cold+0x5/0xa
[ 2782.212295]  ? shmem_alloc_inode+0x18/0x40
[ 2782.212726]  should_failslab+0x5/0x20
[ 2782.213106]  kmem_cache_alloc+0x5b/0x310
[ 2782.213510]  ? shmem_destroy_inode+0x70/0x70
[ 2782.213947]  shmem_alloc_inode+0x18/0x40
[ 2782.214348]  ? shmem_destroy_inode+0x70/0x70
[ 2782.214782]  alloc_inode+0x63/0x240
[ 2782.215142]  new_inode+0x23/0x250
[ 2782.215494]  shmem_get_inode+0x15e/0xbc0
[ 2782.215908]  __shmem_file_setup+0xb8/0x320
[ 2782.216327]  ? _copy_from_user+0xfb/0x1b0
[ 2782.216753]  __do_sys_memfd_create+0x275/0x450
[ 2782.217204]  ? memfd_file_seals_ptr+0x170/0x170
[ 2782.217678]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2782.218197]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2782.218709]  do_syscall_64+0x33/0x40
[ 2782.219080]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2782.219584] RIP: 0033:0x7f281ca21b19
[ 2782.219952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2782.221818] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2782.221831] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2782.221838] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2782.221844] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2782.221850] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2782.221857] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
[ 2782.229089] sg_write: data in/out 221151860/4048 bytes for SCSI command 0x61-- guessing data in;
[ 2782.229089]    program syz-executor.4 not setting count and/or reply_len properly
07:51:12 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff00000000, 0x0, 0x0)

07:51:12 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)

07:51:26 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fd08bc100000000000000196cf561fb42e865830b"], 0x2a)

07:51:26 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x2000000, 0x0, 0x0)

07:51:26 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xdc05, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:26 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:26 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)

07:51:26 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 5)

07:51:26 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x3f00, 0x0, 0x0, 0x0)

07:51:26 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff00000000, 0x0, 0x0)

[ 2795.604394] FAULT_INJECTION: forcing a failure.
[ 2795.604394] name failslab, interval 1, probability 0, space 0, times 0
[ 2795.606053] CPU: 0 PID: 15651 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2795.607031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2795.608214] Call Trace:
[ 2795.608606]  dump_stack+0x107/0x167
[ 2795.609141]  should_fail.cold+0x5/0xa
[ 2795.609687]  ? create_object.isra.0+0x3a/0xa20
[ 2795.610336]  should_failslab+0x5/0x20
[ 2795.610883]  kmem_cache_alloc+0x5b/0x310
[ 2795.611475]  create_object.isra.0+0x3a/0xa20
[ 2795.612099]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2795.612866]  kmem_cache_alloc+0x159/0x310
[ 2795.613462]  ? shmem_destroy_inode+0x70/0x70
[ 2795.614083]  shmem_alloc_inode+0x18/0x40
[ 2795.614672]  ? shmem_destroy_inode+0x70/0x70
[ 2795.615291]  alloc_inode+0x63/0x240
[ 2795.615810]  new_inode+0x23/0x250
[ 2795.616311]  shmem_get_inode+0x15e/0xbc0
[ 2795.616904]  __shmem_file_setup+0xb8/0x320
[ 2795.617524]  ? _copy_from_user+0xfb/0x1b0
[ 2795.617541]  __do_sys_memfd_create+0x275/0x450
[ 2795.617556]  ? memfd_file_seals_ptr+0x170/0x170
[ 2795.617576]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2795.617590]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2795.617609]  do_syscall_64+0x33/0x40
[ 2795.617624]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2795.617634] RIP: 0033:0x7f281ca21b19
[ 2795.617649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2795.617657] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
07:51:26 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x5000000, 0x0, 0x0)

07:51:26 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)

07:51:26 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 6)

07:51:26 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5935)

07:51:26 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfc00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2795.617672] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2795.617680] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2795.617688] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2795.617696] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2795.617704] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
[ 2795.802609] FAULT_INJECTION: forcing a failure.
[ 2795.802609] name failslab, interval 1, probability 0, space 0, times 0
[ 2795.802633] CPU: 1 PID: 15674 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2795.802644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2795.802651] Call Trace:
[ 2795.802680]  dump_stack+0x107/0x167
07:51:26 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffff97a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0xdb, 0x8, 0x3})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00')
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
r4 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r5 = dup(r4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x7, 0x0, 0x0, 0x660, 0x200, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff, 0x6}, 0x18000, 0x2, 0x9, 0x0, 0x9, 0x4, 0x8, 0x0, 0x10000}, 0x0, 0x5, r5, 0x0)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830be1a1a402bb8d2563004569a10e6808aacdc4f594b7a707aad27df17945c1301f2bb87a04ea6c6effc26e82688a96adbd9296fac4eb962ab90718054c3e04e041e10b6cba6ae11876bff47c3d96c7f49073f8ce284302a9090def84657123a4876ccce9388fa3928e93c446402a3d406e0829cf0b18f63da43c"], 0x2a)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r7 = dup(r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x96)
write$binfmt_elf64(r7, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0xff, 0x4, 0x0, 0x3, 0x3, 0x6, 0x4f46, 0x10c, 0x40, 0x2db, 0x4, 0x1ff, 0x38, 0x2, 0x4, 0x5, 0xffc1}, [{0x7, 0x42, 0x6, 0x9, 0x0, 0x1, 0x84}, {0x60000000, 0xfffffff9, 0xffffffffffff6666, 0x8, 0x100000000, 0x9c, 0xda, 0x792}], "c8377e4688f822aa569ba84bf1325386f154cf6a092247fd2057a1b48dac0e88a9da7f537a3ad112f9f6b46b4d5423b23f5299c1ccc5bd40b19c2e7cca36f767034f261386fe68fafdaf2a33af8499310a3df353fd7432024a3a4b515d5687861cc27100d173bbb9d06367d825ad0c0e1c0ef734f1abb27246f055beea3bcf5bc851260c28809758da7cf30b97fc48b87de3", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x642)

[ 2795.802705]  should_fail.cold+0x5/0xa
[ 2795.802731]  ? security_inode_alloc+0x34/0x160
[ 2795.802754]  should_failslab+0x5/0x20
[ 2795.802776]  kmem_cache_alloc+0x5b/0x310
[ 2795.802805]  security_inode_alloc+0x34/0x160
[ 2795.802831]  inode_init_always+0xa4e/0xd10
[ 2795.802850]  ? shmem_destroy_inode+0x70/0x70
[ 2795.802870]  alloc_inode+0x84/0x240
[ 2795.802888]  new_inode+0x23/0x250
[ 2795.802919]  shmem_get_inode+0x15e/0xbc0
[ 2795.802951]  __shmem_file_setup+0xb8/0x320
[ 2795.802971]  ? _copy_from_user+0xfb/0x1b0
[ 2795.802995]  __do_sys_memfd_create+0x275/0x450
[ 2795.803018]  ? memfd_file_seals_ptr+0x170/0x170
[ 2795.803044]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2795.803064]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2795.803091]  do_syscall_64+0x33/0x40
[ 2795.803116]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2795.803133] RIP: 0033:0x7f281ca21b19
[ 2795.803157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2795.803170] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2795.803192] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2795.803204] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2795.803216] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2795.803228] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2795.803240] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
[ 2795.909625] sg_write: data in/out 327637/1416 bytes for SCSI command 0x0-- guessing data in;
[ 2795.909625]    program syz-executor.4 not setting count and/or reply_len properly
[ 2808.539188] FAULT_INJECTION: forcing a failure.
[ 2808.539188] name failslab, interval 1, probability 0, space 0, times 0
[ 2808.540517] CPU: 1 PID: 15697 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2808.541280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2808.542147] Call Trace:
[ 2808.542461]  dump_stack+0x107/0x167
[ 2808.542877]  should_fail.cold+0x5/0xa
07:51:39 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 7)

07:51:39 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x3f03, 0x0, 0x0, 0x0)

[ 2808.543306]  ? create_object.isra.0+0x3a/0xa20
[ 2808.544001]  should_failslab+0x5/0x20
[ 2808.544395]  kmem_cache_alloc+0x5b/0x310
[ 2808.544819]  create_object.isra.0+0x3a/0xa20
[ 2808.545296]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2808.545832]  kmem_cache_alloc+0x159/0x310
[ 2808.546281]  security_inode_alloc+0x34/0x160
[ 2808.546752]  inode_init_always+0xa4e/0xd10
[ 2808.547197]  ? shmem_destroy_inode+0x70/0x70
[ 2808.547684]  alloc_inode+0x84/0x240
[ 2808.548067]  new_inode+0x23/0x250
[ 2808.548435]  shmem_get_inode+0x15e/0xbc0
[ 2808.548885]  __shmem_file_setup+0xb8/0x320
[ 2808.549339]  ? _copy_from_user+0xfb/0x1b0
[ 2808.549773]  __do_sys_memfd_create+0x275/0x450
07:51:39 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0)
ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000140)=""/220)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000280)=""/123, 0x7b)
writev(0xffffffffffffffff, 0x0, 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b6590c2f66f7125b342d8fd6bfe868e2e3ea5f901c80a257d10238d633052de4fc3fd5c900706d66265ec6c525ca7ade8d9e901b127ead5a094"], 0x2a)

[ 2808.550256]  ? memfd_file_seals_ptr+0x170/0x170
[ 2808.550909]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2808.551460]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2808.552011]  do_syscall_64+0x33/0x40
[ 2808.552406]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2808.552945] RIP: 0033:0x7f281ca21b19
[ 2808.553368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2808.555334] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2808.556139] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2808.556883] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2808.557643] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2808.558395] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
07:51:39 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8702)

07:51:39 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfe80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2808.559147] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:39 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)

07:51:39 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x8000000, 0x0, 0x0)

07:51:39 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:39 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x20000000, 0x0, 0x0)

07:51:39 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:39 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 8)

07:51:39 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfec0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:39 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0)

07:51:39 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)

07:51:39 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)

[ 2808.774262] FAULT_INJECTION: forcing a failure.
[ 2808.774262] name failslab, interval 1, probability 0, space 0, times 0
[ 2808.775562] CPU: 1 PID: 15739 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2808.776271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2808.777135] Call Trace:
[ 2808.777422]  dump_stack+0x107/0x167
[ 2808.777805]  should_fail.cold+0x5/0xa
[ 2808.778202]  ? __d_alloc+0x2a/0x990
[ 2808.778607]  should_failslab+0x5/0x20
[ 2808.779003]  kmem_cache_alloc+0x5b/0x310
[ 2808.779424]  ? trace_hardirqs_on+0x5b/0x180
[ 2808.779871]  __d_alloc+0x2a/0x990
[ 2808.780232]  d_alloc_pseudo+0x19/0x70
[ 2808.780624]  alloc_file_pseudo+0xce/0x250
[ 2808.781075]  ? alloc_file+0x5a0/0x5a0
[ 2808.781486]  ? shmem_get_inode+0x55c/0xbc0
[ 2808.781930]  __shmem_file_setup+0x144/0x320
[ 2808.782371]  ? _copy_from_user+0xfb/0x1b0
[ 2808.782797]  __do_sys_memfd_create+0x275/0x450
[ 2808.783264]  ? memfd_file_seals_ptr+0x170/0x170
[ 2808.783743]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2808.784281]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2808.784821]  do_syscall_64+0x33/0x40
[ 2808.785226]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2808.785774] RIP: 0033:0x7f281ca21b19
[ 2808.786166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2808.788123] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2808.788943] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2808.789717] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2808.790449] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2808.791181] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2808.791945] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:52 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:51:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x40000000, 0x0, 0x0)

07:51:52 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'batadv_slave_0\x00'})

07:51:52 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x4000, 0x0, 0x0, 0x0)

07:51:52 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x1502000000000000, 0x0, 0x0)

07:51:52 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xff00, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:52 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:51:52 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 9)

[ 2821.983811] FAULT_INJECTION: forcing a failure.
[ 2821.983811] name failslab, interval 1, probability 0, space 0, times 0
[ 2821.985143] CPU: 1 PID: 15775 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2821.985887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2821.986713] Call Trace:
[ 2821.986997]  dump_stack+0x107/0x167
[ 2821.987363]  should_fail.cold+0x5/0xa
[ 2821.987751]  ? create_object.isra.0+0x3a/0xa20
[ 2821.988207]  should_failslab+0x5/0x20
[ 2821.988591]  kmem_cache_alloc+0x5b/0x310
[ 2821.989001]  create_object.isra.0+0x3a/0xa20
[ 2821.989454]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2821.989971]  kmem_cache_alloc+0x159/0x310
[ 2821.990385]  ? trace_hardirqs_on+0x5b/0x180
[ 2821.990870]  __d_alloc+0x2a/0x990
[ 2821.991227]  d_alloc_pseudo+0x19/0x70
[ 2821.991630]  alloc_file_pseudo+0xce/0x250
[ 2821.992045]  ? alloc_file+0x5a0/0x5a0
[ 2821.992429]  ? shmem_get_inode+0x55c/0xbc0
[ 2821.992888]  __shmem_file_setup+0x144/0x320
[ 2821.993330]  ? _copy_from_user+0xfb/0x1b0
[ 2821.993756]  __do_sys_memfd_create+0x275/0x450
[ 2821.994227]  ? memfd_file_seals_ptr+0x170/0x170
[ 2821.994717]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2821.995261]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2821.995798]  do_syscall_64+0x33/0x40
[ 2821.996180]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2821.996751] RIP: 0033:0x7f281ca21b19
[ 2821.997170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2821.999090] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2821.999879] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2822.000620] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2822.001407] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2822.002145] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2822.002899] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:51:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x76380000, 0x0, 0x0)

07:51:52 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x34000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:52 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:51:52 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040))
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000080)=""/154, &(0x7f00000001c0)=0x9a)
r3 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffa, 0x6, &(0x7f0000000480)=[{&(0x7f0000000240)="2d52828f3fdcef15347ced463d961b7ab7e6beb81e229ff92828d200cd234aac6cb9669c4153d1c4cb6287ace4bef750396d", 0x32, 0xe7d000000000}, {&(0x7f0000000280)="c7f7dcadd181f7708f36a6241d70714d13ed3cf212bac7efd75a3c9262c6e15c25040b760d999c316fb9748d04", 0x2d, 0x101}, {&(0x7f00000002c0), 0x0, 0x1}, {&(0x7f0000000300)="acec655a8d1859828ee065c72858a59ffcb5375b99276236a8e3aaa55c119ace28753012773b2256330dff0fb9cd54c2b73584c55ca37d1156e2ec3614b4c7c721a34379a0a3d3f2ae2b3ab53060481860a32f03910dd56ac02e8b606f0e0ed0a22410d52b97712abecb4f7375fca58c7c0839e6", 0x74, 0x51b}, {&(0x7f0000000380)="ef095f6c6d8521d58d4b15f9b261bf9f75bd5781915f910cfad14e3da9b0cc5006462309947f152d22f24729a637bf68138f8945766d52ceb82fa32f4444a46378c02a3691cbd9dbd456b568580d8da5469bd36553f14721c8323bda9c44c090def7c4c185bfc3dd881f67187a3039e1d2d3d2786a2d4147650441dc0d5ac206787f2bd6e3dc9694783faa3caa692852b7", 0x91, 0xfffffffffffff04e}, {&(0x7f0000000440)="dd3e2e781c933c96ee8878af8d0090f39244262b966a99257b4fef1a906fc8954245f0b7a4338c3ca3e096", 0x2b, 0x100000000000000}], 0x1020020, &(0x7f0000000540)={[{@fat=@nocase}, {@shortname_win95}, {@uni_xlateno}], [{@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, '*@&'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+[:'}}, {@uid_eq}]})
openat(r4, &(0x7f00000005c0)='./file0\x00', 0x20000, 0x10)

07:51:52 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)

07:51:52 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x40000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:51:52 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xc00c0000, 0x0, 0x0)

07:51:52 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)

07:51:52 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:52:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x80000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:06 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x483b, 0x0, 0x0, 0x0)

07:52:06 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 10)

07:52:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xcb030000, 0x0, 0x0)

07:52:06 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)

07:52:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)

[ 2835.714103] FAULT_INJECTION: forcing a failure.
[ 2835.714103] name failslab, interval 1, probability 0, space 0, times 0
[ 2835.716400] CPU: 0 PID: 15837 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2835.717801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2835.719462] Call Trace:
[ 2835.720007]  dump_stack+0x107/0x167
[ 2835.720746]  should_fail.cold+0x5/0xa
[ 2835.721527]  ? __alloc_file+0x21/0x320
[ 2835.722311]  should_failslab+0x5/0x20
[ 2835.723074]  kmem_cache_alloc+0x5b/0x310
[ 2835.723902]  __alloc_file+0x21/0x320
[ 2835.724654]  alloc_empty_file+0x6d/0x170
[ 2835.725498]  alloc_file+0x5e/0x5a0
[ 2835.726224]  alloc_file_pseudo+0x16a/0x250
[ 2835.727087]  ? alloc_file+0x5a0/0x5a0
[ 2835.727870]  ? shmem_get_inode+0x55c/0xbc0
[ 2835.728724]  __shmem_file_setup+0x144/0x320
[ 2835.729608]  ? _copy_from_user+0xfb/0x1b0
[ 2835.730438]  __do_sys_memfd_create+0x275/0x450
[ 2835.731379]  ? memfd_file_seals_ptr+0x170/0x170
[ 2835.732320]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2835.733381]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2835.734434]  do_syscall_64+0x33/0x40
[ 2835.735186]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2835.736229] RIP: 0033:0x7f281ca21b19
[ 2835.736976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2835.740708] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2835.742269] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2835.743725] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2835.745194] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2835.746679] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2835.748156] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:52:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x400300, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:06 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3}, 0x6)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:52:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)

07:52:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0)

07:52:06 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x6435000000000000, 0x0, 0x0)

07:52:06 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)

07:52:06 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 11)

07:52:06 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:06 executing program 4:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8080)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:52:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x1000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2836.006263] FAULT_INJECTION: forcing a failure.
[ 2836.006263] name failslab, interval 1, probability 0, space 0, times 0
[ 2836.008589] CPU: 0 PID: 15881 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2836.010004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2836.011672] Call Trace:
[ 2836.012210]  dump_stack+0x107/0x167
[ 2836.012950]  should_fail.cold+0x5/0xa
[ 2836.013747]  ? create_object.isra.0+0x3a/0xa20
[ 2836.014678]  should_failslab+0x5/0x20
[ 2836.015461]  kmem_cache_alloc+0x5b/0x310
[ 2836.016297]  create_object.isra.0+0x3a/0xa20
[ 2836.017210]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2836.018312]  kmem_cache_alloc+0x159/0x310
[ 2836.019179]  __alloc_file+0x21/0x320
[ 2836.019959]  alloc_empty_file+0x6d/0x170
[ 2836.020797]  alloc_file+0x5e/0x5a0
[ 2836.021546]  alloc_file_pseudo+0x16a/0x250
[ 2836.022428]  ? alloc_file+0x5a0/0x5a0
[ 2836.023228]  ? shmem_get_inode+0x55c/0xbc0
[ 2836.024102]  __shmem_file_setup+0x144/0x320
[ 2836.024975]  ? _copy_from_user+0xfb/0x1b0
[ 2836.025830]  __do_sys_memfd_create+0x275/0x450
[ 2836.026743]  ? memfd_file_seals_ptr+0x170/0x170
[ 2836.027680]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2836.028725]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2836.029768]  do_syscall_64+0x33/0x40
[ 2836.030517]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2836.031540] RIP: 0033:0x7f281ca21b19
[ 2836.032286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2836.035948] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2836.037482] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2836.038916] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2836.040353] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2836.041803] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2836.043230] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:52:06 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xc00c, 0x0, 0x0, 0x0)

07:52:06 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:52:20 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xff00, 0x0, 0x0, 0x0)

07:52:20 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0)

07:52:20 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:20 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x2000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:20 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)

07:52:20 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
readv(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/137, 0x89}], 0x1)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000003a4e6c543f0eb64466cb2a901f062706cea2196cf561fb42e865830b00000000000000"], 0x2a)

07:52:20 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)

07:52:20 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 12)

[ 2850.432372] FAULT_INJECTION: forcing a failure.
[ 2850.432372] name failslab, interval 1, probability 0, space 0, times 0
[ 2850.434717] CPU: 0 PID: 15921 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2850.436129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2850.437806] Call Trace:
[ 2850.438348]  dump_stack+0x107/0x167
[ 2850.439092]  should_fail.cold+0x5/0xa
[ 2850.439878]  ? security_file_alloc+0x34/0x170
[ 2850.440793]  should_failslab+0x5/0x20
[ 2850.441589]  kmem_cache_alloc+0x5b/0x310
[ 2850.442435]  security_file_alloc+0x34/0x170
[ 2850.443337]  __alloc_file+0xb6/0x320
[ 2850.444110]  alloc_empty_file+0x6d/0x170
[ 2850.444945]  alloc_file+0x5e/0x5a0
[ 2850.445688]  alloc_file_pseudo+0x16a/0x250
[ 2850.446545]  ? alloc_file+0x5a0/0x5a0
[ 2850.447322]  ? shmem_get_inode+0x55c/0xbc0
[ 2850.448184]  __shmem_file_setup+0x144/0x320
[ 2850.449055]  ? _copy_from_user+0xfb/0x1b0
[ 2850.449911]  __do_sys_memfd_create+0x275/0x450
[ 2850.450831]  ? memfd_file_seals_ptr+0x170/0x170
[ 2850.451775]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2850.452828]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2850.453885]  do_syscall_64+0x33/0x40
[ 2850.454643]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2850.455671] RIP: 0033:0x7f281ca21b19
[ 2850.456421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2850.460135] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2850.461687] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2850.463138] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2850.464577] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2850.466019] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2850.467451] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:52:21 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0)

07:52:21 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x3000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:21 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)

07:52:21 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)

07:52:35 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 13)

07:52:35 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0xdb, 0x0, 0x0, 0x7fff, 0x1001, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040)}, 0x50000, 0x2, 0x7, 0x6, 0xfffffffffffffffc, 0x140, 0xda, 0x0, 0x1, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:52:35 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2)

07:52:35 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x4000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:35 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x800000, 0x0, 0x0, 0x0)

07:52:35 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:35 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0)

07:52:35 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x59350000)

[ 2864.975594] FAULT_INJECTION: forcing a failure.
[ 2864.975594] name failslab, interval 1, probability 0, space 0, times 0
[ 2864.977096] CPU: 1 PID: 15977 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2864.977996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2864.979049] Call Trace:
[ 2864.979398]  dump_stack+0x107/0x167
[ 2864.979864]  should_fail.cold+0x5/0xa
[ 2864.980347]  ? create_object.isra.0+0x3a/0xa20
[ 2864.980926]  should_failslab+0x5/0x20
[ 2864.981423]  kmem_cache_alloc+0x5b/0x310
[ 2864.981936]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 2864.982639]  create_object.isra.0+0x3a/0xa20
[ 2864.983191]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2864.983830]  kmem_cache_alloc+0x159/0x310
[ 2864.984363]  security_file_alloc+0x34/0x170
[ 2864.984933]  __alloc_file+0xb6/0x320
[ 2864.985423]  alloc_empty_file+0x6d/0x170
[ 2864.985976]  alloc_file+0x5e/0x5a0
[ 2864.986441]  alloc_file_pseudo+0x16a/0x250
[ 2864.987001]  ? alloc_file+0x5a0/0x5a0
[ 2864.987506]  ? shmem_get_inode+0x55c/0xbc0
[ 2864.988064]  __shmem_file_setup+0x144/0x320
[ 2864.988628]  ? _copy_from_user+0xfb/0x1b0
[ 2864.989169]  __do_sys_memfd_create+0x275/0x450
[ 2864.989777]  ? memfd_file_seals_ptr+0x170/0x170
[ 2864.990395]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2864.991076]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2864.991753]  do_syscall_64+0x33/0x40
[ 2864.992241]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2864.992914] RIP: 0033:0x7f281ca21b19
[ 2864.993401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2864.995800] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 2864.996792] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f281ca21b19
[ 2864.997727] RDX: 000000000001e000 RSI: 0000000000000000 RDI: 00007f281ca7b0fb
[ 2864.998657] RBP: 0000000000000003 R08: 000000000000f000 R09: ffffffffffffffff
[ 2864.999558] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000
[ 2865.000480] R13: 0000000020000100 R14: 000000000001e000 R15: 0000000020000040
07:52:35 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x8000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:35 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
getpgid(r1)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1, 0x2, 0x4d, 0x54, 0x0, 0x4adf, 0x20100, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x100}, 0x148, 0x80000000, 0x200, 0x7, 0xa0, 0x4, 0x800, 0x0, 0x9, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x9)
r2 = dup(0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x2a)
r3 = gettid()
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x69, 0x6, 0x1, 0x8, 0x0, 0x4, 0x10808, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x0, 0x8001}, 0x0, 0x9, 0x10001, 0x8, 0x9, 0x0, 0x20, 0x0, 0x2, 0x0, 0x7}, r3, 0xe, 0xffffffffffffffff, 0xe)

07:52:35 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5)

07:52:35 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0)

07:52:35 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x87020000)

07:52:35 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8)

07:52:35 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:51 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:52:51 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0)

07:52:51 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 14)

07:52:51 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)

[ 2880.935146] FAULT_INJECTION: forcing a failure.
[ 2880.935146] name fail_page_alloc, interval 1, probability 0, space 0, times 0
07:52:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xe000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:51 executing program 4:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1ebb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}})
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000080)={'netdevsim0\x00'})
r4 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r5 = dup(r4)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/scsi_mod', 0x482001, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @empty, 0x1}, 0x1c)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r5, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:52:51 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60)

07:52:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x2000000, 0x0, 0x0, 0x0)

[ 2880.936718] CPU: 1 PID: 16041 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2880.937604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2880.938457] Call Trace:
[ 2880.938778]  dump_stack+0x107/0x167
[ 2880.939144]  should_fail.cold+0x5/0xa
[ 2880.939570]  __alloc_pages_nodemask+0x182/0x600
[ 2880.940039]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2880.940686]  ? lock_downgrade+0x6d0/0x6d0
[ 2880.941099]  ? lock_acquire+0x197/0x470
[ 2880.941515]  alloc_pages_vma+0xbb/0x410
[ 2880.941925]  shmem_alloc_page+0x10f/0x1e0
[ 2880.942336]  ? shmem_init_inode+0x20/0x20
[ 2880.942768]  ? percpu_counter_add_batch+0x8b/0x140
[ 2880.943307]  ? __vm_enough_memory+0x184/0x360
[ 2880.943757]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 2880.944295]  ? shmem_unuse_inode+0xf60/0xf60
[ 2880.944746]  ? ktime_get_coarse_real_ts64+0x15a/0x190
[ 2880.945271]  ? iov_iter_fault_in_readable+0x9a/0x410
[ 2880.945821]  shmem_write_begin+0xf7/0x1d0
[ 2880.946273]  generic_perform_write+0x20a/0x4f0
[ 2880.946758]  ? page_cache_next_miss+0x310/0x310
[ 2880.947245]  ? evict_inodes+0x420/0x420
[ 2880.947663]  ? generic_write_checks+0x2ad/0x390
[ 2880.948150]  __generic_file_write_iter+0x39d/0x5d0
[ 2880.948666]  generic_file_write_iter+0xdb/0x230
[ 2880.949166]  ? iov_iter_init+0x3c/0x130
[ 2880.949587]  new_sync_write+0x42c/0x660
[ 2880.950033]  ? new_sync_read+0x6f0/0x6f0
[ 2880.950452]  ? __x64_sys_pwrite64+0x201/0x260
[ 2880.950928]  ? lock_release+0x680/0x680
[ 2880.951332]  ? selinux_file_permission+0x92/0x520
[ 2880.951851]  vfs_write+0x747/0xa70
[ 2880.952223]  __x64_sys_pwrite64+0x201/0x260
[ 2880.952675]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2880.953099]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2880.953651]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2880.954208]  do_syscall_64+0x33/0x40
[ 2880.954618]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2880.955153] RIP: 0033:0x7f281c9d4ab7
[ 2880.955563] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2880.957482] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2880.958322] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2880.959054] RDX: 000000000000009f RSI: 0000000020010a00 RDI: 0000000000000004
[ 2880.959780] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2880.960537] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004
[ 2880.961289] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
07:52:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x11000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000133e192e0abd93189500ae37c58e96000058adb28c98aef0de039bc36d9d4c7c0000554e6c54360eb64406ce19"], 0x2a)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0xaa, 0x81, 0x4, "c9a507ebc2e4e96eee826c9a6657bf2106c2b150ca3bba7ac21b112891752e9f7aa18aab834b161c54cab996cd3d8529b5ca31388bfac7733a13ee02100a90fbf45dc3fff5d7ece5331fdc39a29f7ca37b3e07cb2f9e4953c60c02f17bee152d66c06222918005a97df30c09cbff33c91e0d8cd61f3e64705d45597884eaf46b019b2d8b5db553cd4ef0bde5fded64fad5cb36a10a69c6246be0b84a5c2529c704e26c409deeb86712f8"})

07:52:51 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0)

07:52:51 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x215)

07:52:51 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)

07:52:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x56000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:51 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2881.152824] isofs_fill_super: bread failed, dev=loop6, iso_blknum=60, block=120
07:52:51 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x60000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:52:51 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001240)={0x53, 0xffffffffffffffff, 0xe9, 0x3f, @buffer={0x0, 0x1000, &(0x7f00000001c0)=""/4096}, &(0x7f0000000040)="402267e53701cff08ffc0dbc0b28fbb6e17615bd1d1e8522a9cce1e7b9f2ffa2b47a95f838ac9fb4506d8d708d58be3e0bebd08ef5bd1dda3fc2375cd70305e2386ac42cea5a6ce4d5938351281e72f0ba4a9a95ddfc8a59ea7708267e15f056cdf29626e849c4d01c8bc69192cef3279888a20a0d13af7abf558a8d881279361762d74b3bdad918f66ec8f9d1f6cffaaeb7aef5e0042b9a5c0089339eded9cb1cff124bd50f3059ee318ab618c1c014cd6ef4bfc0ed3c33178f9af3640b306cc6abdff0b19c16a218ff1613139f31c106f85fbcac1b4c973b8a35ac75f84548f89e06ef0ef60bf15e", &(0x7f00000011c0)=""/41, 0x8, 0x10022, 0x3, &(0x7f0000001200)})
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = syz_io_uring_setup(0x12ef, &(0x7f0000000000)={0x0, 0xd222, 0x8, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x4000010, r2, 0x8000000)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000002a40))
syz_io_uring_setup(0x3253, &(0x7f0000000100)={0x0, 0x65f1, 0x4, 0x0, 0x1e5, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000002a40)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x82}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, {0x0, r6}}, 0x967)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000012c0), 0x8080, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000001300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r7}, 0x80)

07:52:51 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x5000000, 0x0, 0x0, 0x0)

07:53:05 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x8000000, 0x0, 0x0, 0x0)

07:53:05 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)

07:53:05 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
getpgid(r2)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x95, 0x81, 0x15, 0x0, 0x9, 0x1008, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x383b, 0x7}, 0x22, 0x9, 0x7, 0x3, 0x5, 0x7fff, 0x800, 0x0, 0x3, 0x0, 0x100000000}, r2, 0x4, r0, 0x3)
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r4, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:53:05 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 15)

07:53:05 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x7ffffff7, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0)

07:53:05 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:53:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500)

[ 2895.007381] FAULT_INJECTION: forcing a failure.
[ 2895.007381] name failslab, interval 1, probability 0, space 0, times 0
[ 2895.010257] CPU: 0 PID: 16126 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2895.011729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2895.013499] Call Trace:
[ 2895.014084]  dump_stack+0x107/0x167
[ 2895.014871]  should_fail.cold+0x5/0xa
[ 2895.015700]  ? xas_alloc+0x336/0x440
[ 2895.016516]  should_failslab+0x5/0x20
[ 2895.017345]  kmem_cache_alloc+0x5b/0x310
[ 2895.018249]  ? __lockdep_reset_lock+0x180/0x180
[ 2895.019269]  xas_alloc+0x336/0x440
[ 2895.020043]  xas_create+0x34a/0x10d0
[ 2895.020871]  xas_create_range+0x189/0x620
[ 2895.021797]  shmem_add_to_page_cache+0x760/0x1130
[ 2895.022888]  ? shmem_getattr+0x180/0x180
[ 2895.023793]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 2895.024975]  ? shmem_unuse_inode+0xf60/0xf60
[ 2895.025917]  ? ktime_get_coarse_real_ts64+0x15a/0x190
[ 2895.027052]  ? iov_iter_fault_in_readable+0x9a/0x410
[ 2895.028148]  shmem_write_begin+0xf7/0x1d0
[ 2895.029051]  generic_perform_write+0x20a/0x4f0
[ 2895.030039]  ? page_cache_next_miss+0x310/0x310
[ 2895.031068]  ? evict_inodes+0x420/0x420
[ 2895.031924]  ? generic_write_checks+0x2ad/0x390
[ 2895.032928]  __generic_file_write_iter+0x39d/0x5d0
[ 2895.033988]  generic_file_write_iter+0xdb/0x230
[ 2895.034985]  ? iov_iter_init+0x3c/0x130
[ 2895.035837]  new_sync_write+0x42c/0x660
[ 2895.036689]  ? new_sync_read+0x6f0/0x6f0
[ 2895.037562]  ? __x64_sys_pwrite64+0x201/0x260
[ 2895.038541]  ? lock_release+0x680/0x680
[ 2895.039386]  ? selinux_file_permission+0x92/0x520
[ 2895.040456]  vfs_write+0x747/0xa70
[ 2895.041232]  __x64_sys_pwrite64+0x201/0x260
[ 2895.042180]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2895.043054]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2895.044192]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2895.045299]  do_syscall_64+0x33/0x40
[ 2895.046175]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2895.047264] RIP: 0033:0x7f281c9d4ab7
[ 2895.048076] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2895.052075] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2895.053724] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2895.055282] RDX: 000000000000009f RSI: 0000000020010a00 RDI: 0000000000000004
[ 2895.056835] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2895.058374] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004
[ 2895.059888] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
07:53:05 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000)

07:53:05 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x8, 0x0, 0x0, 0xb9, 0x462a4, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x401, 0xc7}, 0x0, 0x8, 0x598f, 0x8, 0x8, 0xc993, 0x5, 0x0, 0x81, 0x0, 0x985}, 0x0, 0xb, r0, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:53:05 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xdc050000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0)

07:53:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x2, 0x0)

07:53:05 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000)

07:53:19 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x20000000, 0x0, 0x0, 0x0)

07:53:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xeffdffff, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000)

07:53:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x7638000000000000, 0x0, 0x0)

07:53:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)

07:53:19 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 16)

07:53:19 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x88fb}, @void, @x25={0x1, 0x0, 0x0, "554e6c54360eb64466faffffffffffffff43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:53:19 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2909.348596] FAULT_INJECTION: forcing a failure.
[ 2909.348596] name failslab, interval 1, probability 0, space 0, times 0
[ 2909.351304] CPU: 0 PID: 16179 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2909.352958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2909.354965] Call Trace:
[ 2909.355516]  dump_stack+0x107/0x167
[ 2909.356252]  should_fail.cold+0x5/0xa
[ 2909.357021]  ? create_object.isra.0+0x3a/0xa20
[ 2909.357943]  should_failslab+0x5/0x20
[ 2909.358721]  kmem_cache_alloc+0x5b/0x310
[ 2909.359541]  create_object.isra.0+0x3a/0xa20
[ 2909.360428]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2909.361452]  kmem_cache_alloc+0x159/0x310
[ 2909.362293]  ? __lockdep_reset_lock+0x180/0x180
[ 2909.363233]  xas_alloc+0x336/0x440
[ 2909.363949]  xas_create+0x34a/0x10d0
[ 2909.364721]  xas_create_range+0x189/0x620
[ 2909.365571]  shmem_add_to_page_cache+0x760/0x1130
[ 2909.366571]  ? shmem_getattr+0x180/0x180
[ 2909.367413]  shmem_getpage_gfp.constprop.0+0x64a/0x1920
[ 2909.368499]  ? shmem_unuse_inode+0xf60/0xf60
[ 2909.369382]  ? iov_iter_fault_in_readable+0x9a/0x410
[ 2909.370413]  shmem_write_begin+0xf7/0x1d0
[ 2909.371248]  generic_perform_write+0x20a/0x4f0
[ 2909.372174]  ? __mnt_drop_write_file+0x9/0x70
[ 2909.373071]  ? page_cache_next_miss+0x310/0x310
[ 2909.374004]  ? evict_inodes+0x420/0x420
[ 2909.374813]  ? generic_write_checks+0x2ad/0x390
[ 2909.375752]  __generic_file_write_iter+0x39d/0x5d0
[ 2909.376737]  generic_file_write_iter+0xdb/0x230
[ 2909.377666]  ? iov_iter_init+0x3c/0x130
[ 2909.378479]  new_sync_write+0x42c/0x660
[ 2909.379277]  ? new_sync_read+0x6f0/0x6f0
[ 2909.380095]  ? __x64_sys_pwrite64+0x201/0x260
[ 2909.380995]  ? lock_release+0x680/0x680
[ 2909.381790]  ? selinux_file_permission+0x92/0x520
[ 2909.382784]  vfs_write+0x747/0xa70
[ 2909.383519]  __x64_sys_pwrite64+0x201/0x260
[ 2909.384382]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2909.385202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2909.386255]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2909.387297]  do_syscall_64+0x33/0x40
[ 2909.388051]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2909.389074] RIP: 0033:0x7f281c9d4ab7
[ 2909.389831] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2909.393527] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2909.395068] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2909.396489] RDX: 000000000000009f RSI: 0000000020010a00 RDI: 0000000000000004
[ 2909.397908] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2909.399341] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004
[ 2909.400762] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
07:53:19 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0)

07:53:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1502)

07:53:19 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:53:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xf7ffff7f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:19 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '##\\^/!*'}, {}, {0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '-@./%'}], 0xa, "94344b5d8f6992dfd120fdde44362ec663aa29e22f8f5be44b8616296a017b07321ccbed4d8b16fd3f3f4d5da48bd4160a00e115112b6cbcd45438acb10d634e7ab47e871263b1a94b6d382ea89215987e8856c6a3e5fd40fe10ea3bc5aa1838e0eb30a2086dbf36c74c32a632108cfffcb086412198d3d07671d3a4ea5cf0d9585d98a6e18f3535ad2bd4d1f73e26392c2a78cb51c0277d501c73999a00afbd10213f43147219908b424524a64c52dc5c192cfe92d9b4bb757b378b2fc09744cada0ef20412471fdc579df9a2123ca86027204b907152269560"}, 0x108)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:53:19 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000)

07:53:19 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0)

07:53:19 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:53:20 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfc000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:20 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xcb03000000000000, 0x0, 0x0)

07:53:32 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0)

07:53:32 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x3f030000, 0x0, 0x0, 0x0)

07:53:32 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3564)

07:53:32 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:53:32 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 17)

07:53:32 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfe800000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2921.692026] FAULT_INJECTION: forcing a failure.
[ 2921.692026] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2921.693373] CPU: 1 PID: 16256 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2921.694124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2921.695034] Call Trace:
[ 2921.695332]  dump_stack+0x107/0x167
[ 2921.695724]  should_fail.cold+0x5/0xa
[ 2921.696147]  iov_iter_copy_from_user_atomic+0x49b/0xdb0
[ 2921.696734]  ? shmem_write_begin+0xf7/0x1d0
[ 2921.697192]  ? shmem_write_begin+0x100/0x1d0
[ 2921.697671]  generic_perform_write+0x279/0x4f0
[ 2921.698166]  ? page_cache_next_miss+0x310/0x310
[ 2921.698680]  ? evict_inodes+0x420/0x420
[ 2921.699109]  ? generic_write_checks+0x2ad/0x390
[ 2921.699608]  __generic_file_write_iter+0x39d/0x5d0
[ 2921.700149]  generic_file_write_iter+0xdb/0x230
[ 2921.700657]  ? iov_iter_init+0x3c/0x130
[ 2921.701097]  new_sync_write+0x42c/0x660
[ 2921.701527]  ? new_sync_read+0x6f0/0x6f0
[ 2921.701968]  ? __x64_sys_pwrite64+0x201/0x260
[ 2921.702473]  ? lock_release+0x680/0x680
[ 2921.702925]  ? selinux_file_permission+0x92/0x520
[ 2921.703463]  vfs_write+0x747/0xa70
[ 2921.703870]  __x64_sys_pwrite64+0x201/0x260
[ 2921.704350]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2921.704792]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2921.705367]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2921.705955]  do_syscall_64+0x33/0x40
[ 2921.706376]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2921.706932] RIP: 0033:0x7f281c9d4ab7
[ 2921.707345] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2921.709391] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2921.710246] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2921.711064] RDX: 000000000000009f RSI: 0000000020010a00 RDI: 0000000000000004
[ 2921.711836] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2921.712637] R10: 0000000000008800 R11: 0000000000000293 R12: 0000000000000004
[ 2921.713423] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000
07:53:32 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000)

07:53:32 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0)

07:53:32 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)

07:53:32 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x40000000, 0x0, 0x0, 0x0)

07:53:32 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 18)

07:53:32 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfec00000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2921.915736] FAULT_INJECTION: forcing a failure.
[ 2921.915736] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2921.917136] CPU: 1 PID: 16296 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2921.917891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2921.918815] Call Trace:
[ 2921.919111]  dump_stack+0x107/0x167
[ 2921.919507]  should_fail.cold+0x5/0xa
[ 2921.919931]  __alloc_pages_nodemask+0x182/0x600
[ 2921.920430]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2921.921088]  ? lock_downgrade+0x6d0/0x6d0
[ 2921.921535]  ? lock_acquire+0x197/0x470
[ 2921.921977]  alloc_pages_vma+0xbb/0x410
[ 2921.922423]  shmem_alloc_page+0x10f/0x1e0
[ 2921.922873]  ? shmem_init_inode+0x20/0x20
[ 2921.923361]  ? percpu_counter_add_batch+0x8b/0x140
[ 2921.923894]  ? __vm_enough_memory+0x184/0x360
[ 2921.924382]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 2921.924985]  ? shmem_unuse_inode+0xf60/0xf60
[ 2921.925465]  ? ktime_get_coarse_real_ts64+0x15a/0x190
[ 2921.926032]  ? iov_iter_fault_in_readable+0x9a/0x410
[ 2921.926622]  shmem_write_begin+0xf7/0x1d0
[ 2921.927092]  generic_perform_write+0x20a/0x4f0
[ 2921.927610]  ? page_cache_next_miss+0x310/0x310
[ 2921.928131]  ? evict_inodes+0x420/0x420
[ 2921.928571]  ? generic_write_checks+0x2ad/0x390
[ 2921.929094]  __generic_file_write_iter+0x39d/0x5d0
[ 2921.929648]  generic_file_write_iter+0xdb/0x230
[ 2921.930178]  ? iov_iter_init+0x3c/0x130
[ 2921.930622]  new_sync_write+0x42c/0x660
[ 2921.931067]  ? new_sync_read+0x6f0/0x6f0
[ 2921.931523]  ? __x64_sys_pwrite64+0x201/0x260
[ 2921.932022]  ? lock_release+0x680/0x680
[ 2921.932461]  ? selinux_file_permission+0x92/0x520
[ 2921.933017]  vfs_write+0x747/0xa70
[ 2921.933420]  __x64_sys_pwrite64+0x201/0x260
[ 2921.933904]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2921.934359]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2921.934929]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2921.935511]  do_syscall_64+0x33/0x40
[ 2921.935925]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2921.936504] RIP: 0033:0x7f281c9d4ab7
[ 2921.936932] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2921.938991] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2921.939835] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2921.940625] RDX: 0000000000000001 RSI: 0000000020011500 RDI: 0000000000000004
[ 2921.941413] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2921.942206] R10: 000000000000e000 R11: 0000000000000293 R12: 0000000000000004
[ 2921.943015] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
07:53:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 19)

07:53:47 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:53:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x483b0000, 0x0, 0x0, 0x0)

07:53:47 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r0=>0x0}, &(0x7f0000000400)=0xc)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="627782d7eb9ab70dad04a6e6455953590660d57cf9a4b194e650b1451712ddf196743c147732c0c02803af38e6407ea05a37334d4b46b7f6f11ab3e9bf1c719ac2b36d4ad4fe4f97fdd3069d95bcf6ad12c47e84036365ad693581dbad2ff670980de659326519276574d5a3ebf02ddfa9b28d7dd7c5a2257b293ed6cbd3c0bea12365368437242e3838e299e971415caef16c1ad5a06cb12e36ee802b367366a998285e4827480b46eff7", 0xab, 0x80000000}, {&(0x7f00000001c0)="37fb3c61c776c24d51290563d732049b4c1a051698ec651fc68eb1d4da98de29167388765a580f12423437cc2201c13fb7245cbf5d2f80986f0b09d1ae800421619c996c44a0eff62bcb8b2b4db4607ec22ab5e2b18e27c3dccb9a6942b19d9afa510a6e8a5ce186d47f82cfab3855ea52da64127cceea7e8756ff662ae253846cb290544a813489c6511de614", 0x8d, 0x4}, {&(0x7f0000000280)="587e22b7cf049cb1798cef7146c141b66149", 0x12}, {&(0x7f00000002c0)="a61a511bb9843f419d80de6b17c1d541b80bc59e6993e08b109eb8d37b4b122b2fc9b7e7d941aa5897f52b2356e9befde170c2da100b3a38381af8aa14ddfd31032919cbe304ba2ce2b576928ee81db216d05706da3de08ace45bdb8da4a43d57b121352e11475", 0x67, 0xeb26}], 0x100081, &(0x7f0000000440)={[{@shortname_mixed}, {@fat=@check_strict}, {@uni_xlateno}, {@rodir}, {@fat=@uid={'uid', 0x3d, r0}}, {@utf8}, {@rodir}], [{@euid_lt}, {@obj_role={'obj_role', 0x3d, '@$\')$'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]})
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r4], 0x54}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd06d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
creat(&(0x7f0000000700)='./file0\x00', 0x8c)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0xffffffff, 0xf5, 0x3, 0x20, 0x2, [{0x6, 0x4, 0x1, '\x00', 0x3000}, {0x7, 0x0, 0x5, '\x00', 0x104}]})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r7 = dup(r6)
write$tun(r7, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2937.260441] FAULT_INJECTION: forcing a failure.
[ 2937.260441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2937.263079] CPU: 1 PID: 16310 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2937.264492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2937.266117] Call Trace:
[ 2937.266660]  dump_stack+0x107/0x167
[ 2937.267383]  should_fail.cold+0x5/0xa
[ 2937.268150]  iov_iter_copy_from_user_atomic+0x49b/0xdb0
[ 2937.269211]  ? shmem_write_begin+0xf7/0x1d0
[ 2937.270063]  ? shmem_write_begin+0x100/0x1d0
[ 2937.270942]  generic_perform_write+0x279/0x4f0
[ 2937.271850]  ? page_cache_next_miss+0x310/0x310
[ 2937.272767]  ? evict_inodes+0x420/0x420
[ 2937.273553]  ? generic_write_checks+0x2ad/0x390
[ 2937.274483]  __generic_file_write_iter+0x39d/0x5d0
[ 2937.275480]  generic_file_write_iter+0xdb/0x230
[ 2937.276400]  ? iov_iter_init+0x3c/0x130
[ 2937.277196]  new_sync_write+0x42c/0x660
[ 2937.277992]  ? new_sync_read+0x6f0/0x6f0
[ 2937.278815]  ? __x64_sys_pwrite64+0x201/0x260
[ 2937.279712]  ? lock_release+0x680/0x680
[ 2937.280506]  ? selinux_file_permission+0x92/0x520
[ 2937.281489]  vfs_write+0x747/0xa70
[ 2937.282228]  __x64_sys_pwrite64+0x201/0x260
[ 2937.283103]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2937.283918]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2937.284964]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2937.285997]  do_syscall_64+0x33/0x40
[ 2937.286752]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2937.287772] RIP: 0033:0x7f281c9d4ab7
[ 2937.288510] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2937.292163] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
07:53:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000)

07:53:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x2)

07:53:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000)

07:53:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xff000000, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2937.293667] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2937.295314] RDX: 0000000000000001 RSI: 0000000020011500 RDI: 0000000000000004
[ 2937.296917] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2937.298335] R10: 000000000000e000 R11: 0000000000000293 R12: 0000000000000004
[ 2937.299939] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001
07:53:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xfffffdef, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:47 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:53:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x5)

07:53:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 20)

07:53:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000)

07:53:48 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000)

07:53:48 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
dup(r0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7fd99e43b23b062706cea2196cf561fb42e865830bea354739a6d8e5680dc0221a8d2c0e59b58a10043b7db2"], 0x2a)

[ 2937.598225] FAULT_INJECTION: forcing a failure.
[ 2937.598225] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2937.600831] CPU: 1 PID: 16353 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2937.602261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2937.603986] Call Trace:
[ 2937.604537]  dump_stack+0x107/0x167
[ 2937.605294]  should_fail.cold+0x5/0xa
[ 2937.606077]  __alloc_pages_nodemask+0x182/0x600
[ 2937.607055]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 2937.608296]  ? lock_downgrade+0x6d0/0x6d0
[ 2937.609148]  ? lock_acquire+0x197/0x470
[ 2937.609992]  alloc_pages_vma+0xbb/0x410
[ 2937.610832]  shmem_alloc_page+0x10f/0x1e0
[ 2937.611684]  ? shmem_init_inode+0x20/0x20
[ 2937.612572]  ? percpu_counter_add_batch+0x8b/0x140
[ 2937.613586]  ? __vm_enough_memory+0x184/0x360
[ 2937.614518]  shmem_getpage_gfp.constprop.0+0x512/0x1920
[ 2937.615638]  ? shmem_unuse_inode+0xf60/0xf60
[ 2937.616544]  ? ktime_get_coarse_real_ts64+0x15a/0x190
[ 2937.617596]  ? iov_iter_fault_in_readable+0x9a/0x410
[ 2937.618649]  shmem_write_begin+0xf7/0x1d0
[ 2937.619495]  generic_perform_write+0x20a/0x4f0
[ 2937.620455]  ? page_cache_next_miss+0x310/0x310
[ 2937.621418]  ? evict_inodes+0x420/0x420
[ 2937.622238]  ? generic_write_checks+0x2ad/0x390
[ 2937.623233]  __generic_file_write_iter+0x39d/0x5d0
[ 2937.624249]  generic_file_write_iter+0xdb/0x230
[ 2937.625204]  ? iov_iter_init+0x3c/0x130
[ 2937.626027]  new_sync_write+0x42c/0x660
[ 2937.626853]  ? new_sync_read+0x6f0/0x6f0
[ 2937.627699]  ? __x64_sys_pwrite64+0x201/0x260
[ 2937.628615]  ? lock_release+0x680/0x680
[ 2937.629414]  ? selinux_file_permission+0x92/0x520
[ 2937.630421]  vfs_write+0x747/0xa70
[ 2937.631173]  __x64_sys_pwrite64+0x201/0x260
[ 2937.632057]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2937.632900]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2937.633986]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2937.635057]  do_syscall_64+0x33/0x40
[ 2937.635828]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2937.636869] RIP: 0033:0x7f281c9d4ab7
[ 2937.637640] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
[ 2937.641385] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2937.642932] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2937.644398] RDX: 000000000000001a RSI: 0000000020011800 RDI: 0000000000000004
[ 2937.645858] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2937.647299] R10: 000000000000f000 R11: 0000000000000293 R12: 0000000000000004
[ 2937.648752] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
07:53:48 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x8)

07:53:48 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xc00c0000, 0x0, 0x0, 0x0)

07:53:48 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0xffffff7f, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:53:48 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000)

[ 2937.756695] isofs_fill_super: get root inode failed
07:54:03 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:03 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0)
preadv(r3, &(0x7f0000001580)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/8, 0x8}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f0000001280)=""/9, 0x9}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/213, 0xd5}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001440)=""/23, 0x17}, {&(0x7f0000001480)=""/238, 0xee}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0xa, 0x4, 0xffff8000)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r4=>0x0})
r5 = getpid()
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r7 = dup(r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x96)
perf_event_open(&(0x7f0000001680)={0x3, 0x80, 0x1f, 0x4, 0x4, 0x8, 0x0, 0x4, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x5980, 0x8, 0x8, 0x6, 0xffffffffffffffff, 0x1ff, 0x1, 0x0, 0x8, 0x0, 0x7f}, r5, 0x9, r7, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x91, 0x7f, 0x7, 0x0, 0x2, 0x1044, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x110, 0x3, 0x400, 0x3, 0xfffffffffffffffa, 0x101, 0x965, 0x0, 0x6, 0x0, 0x4}, r4, 0xe, 0xffffffffffffffff, 0x0)
write$tun(r2, &(0x7f0000001640)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2aab9b6a7fb23b062706cea2196cf561fb42e865830b000000077cff"], 0x2a)

[ 2953.368324] FAULT_INJECTION: forcing a failure.
[ 2953.368324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2953.370796] CPU: 0 PID: 16413 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2953.372199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2953.373888] Call Trace:
[ 2953.374438]  dump_stack+0x107/0x167
[ 2953.375186]  should_fail.cold+0x5/0xa
[ 2953.375955]  iov_iter_copy_from_user_atomic+0x49b/0xdb0
[ 2953.377032]  ? shmem_write_begin+0xf7/0x1d0
[ 2953.377898]  ? shmem_write_begin+0x100/0x1d0
[ 2953.378826]  generic_perform_write+0x279/0x4f0
[ 2953.379771]  ? page_cache_next_miss+0x310/0x310
[ 2953.380724]  ? evict_inodes+0x420/0x420
[ 2953.381531]  ? generic_write_checks+0x2ad/0x390
[ 2953.382484]  __generic_file_write_iter+0x39d/0x5d0
[ 2953.383504]  generic_file_write_iter+0xdb/0x230
[ 2953.384662]  ? iov_iter_init+0x3c/0x130
[ 2953.385484]  new_sync_write+0x42c/0x660
[ 2953.386249]  ? new_sync_read+0x6f0/0x6f0
[ 2953.387104]  ? __x64_sys_pwrite64+0x201/0x260
[ 2953.387988]  ? lock_release+0x680/0x680
[ 2953.388779]  ? selinux_file_permission+0x92/0x520
[ 2953.389740]  vfs_write+0x747/0xa70
[ 2953.390479]  __x64_sys_pwrite64+0x201/0x260
[ 2953.391361]  ? ksys_pwrite64+0x1b0/0x1b0
[ 2953.392156]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2953.393195]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2953.394234]  do_syscall_64+0x33/0x40
[ 2953.394999]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2953.395993] RIP: 0033:0x7f281c9d4ab7
[ 2953.396710] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b
07:54:03 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0)

07:54:03 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5935000000000000)

07:54:03 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6435)

07:54:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x3cb)

07:54:03 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:03 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 21)

07:54:03 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:03 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2953.400560] RSP: 002b:00007f2819f96f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012
[ 2953.400603] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4ab7
[ 2953.400614] RDX: 000000000000001a RSI: 0000000020011800 RDI: 0000000000000004
07:54:03 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x500)

[ 2953.400626] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff
[ 2953.400637] R10: 000000000000f000 R11: 0000000000000293 R12: 0000000000000004
[ 2953.400649] R13: 0000000000000004 R14: 0000000020000230 R15: 0000000000000002
07:54:03 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:03 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x8, 0x5, 0x0, 0x0, 0x5, 0x80000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7, 0x7}, 0x2, 0x100000000, 0x6, 0x3, 0xffff, 0x7, 0x101, 0x0, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

[ 2967.640964] FAULT_INJECTION: forcing a failure.
[ 2967.640964] name failslab, interval 1, probability 0, space 0, times 0
[ 2967.643442] CPU: 1 PID: 16456 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2967.644863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2967.646757] Call Trace:
[ 2967.647485]  dump_stack+0x107/0x167
[ 2967.648239]  should_fail.cold+0x5/0xa
[ 2967.649010]  ? getname_flags.part.0+0x50/0x4f0
[ 2967.649935]  should_failslab+0x5/0x20
[ 2967.650704]  kmem_cache_alloc+0x5b/0x310
[ 2967.651557]  getname_flags.part.0+0x50/0x4f0
[ 2967.652456]  getname+0x8e/0xd0
[ 2967.653119]  do_sys_openat2+0xf9/0x420
07:54:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000554e6c54360eb6c466cb2a909b6b7fd98b43b265830b00"/38], 0x26)

07:54:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8702000000000000)

07:54:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)

07:54:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xff000000, 0x0, 0x0, 0x0)

07:54:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 22)

07:54:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xcc0)

[ 2967.653908]  ? build_open_flags+0x6f0/0x6f0
[ 2967.654884]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2967.655862]  __x64_sys_openat+0x13f/0x1f0
[ 2967.656709]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2967.657584]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2967.658649]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2967.659706]  do_syscall_64+0x33/0x40
[ 2967.660475]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2967.661504] RIP: 0033:0x7f281c9d4a04
[ 2967.662256] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2967.665947] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2967.667498] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2967.668925] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2967.670359] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2967.671796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2967.673229] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:54:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)={@val, @val={0x3, 0xf83c0fa43e165580, 0x6, 0x6, 0x6, 0x6}, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x34)

07:54:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xe}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000)

07:54:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000)

07:54:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x2000)

07:54:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 23)

07:54:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x4, &(0x7f0000001200)=[{&(0x7f00000001c0)="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", 0x1000, 0x3}, {&(0x7f00000000c0)="0cfa7d56bbbad38cddfc7d8718cd6d8233f91924ad", 0x15, 0x6}, {&(0x7f0000000100)="067759d03ccd1a32c35341a4169e5c9cbe3806568031471d97214083bc8e", 0x1e, 0xfffffffffffff63a}, {&(0x7f00000011c0), 0x0, 0x1}], 0x10, &(0x7f0000001280)={[{@commit={'commit', 0x3d, 0x4}}, {@dioread_nolock}], [{@audit}]})
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000484e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"], 0x2a)

07:54:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x11}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 2967.964030] FAULT_INJECTION: forcing a failure.
[ 2967.964030] name failslab, interval 1, probability 0, space 0, times 0
[ 2967.966492] CPU: 1 PID: 16502 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2967.967896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2967.969564] Call Trace:
[ 2967.970106]  dump_stack+0x107/0x167
[ 2967.970849]  should_fail.cold+0x5/0xa
[ 2967.971641]  ? create_object.isra.0+0x3a/0xa20
[ 2967.972564]  should_failslab+0x5/0x20
[ 2967.973356]  kmem_cache_alloc+0x5b/0x310
[ 2967.974178]  ? __generic_file_write_iter+0x1a4/0x5d0
[ 2967.975228]  create_object.isra.0+0x3a/0xa20
[ 2967.976121]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2967.977161]  kmem_cache_alloc+0x159/0x310
[ 2967.978021]  getname_flags.part.0+0x50/0x4f0
[ 2967.978934]  getname+0x8e/0xd0
[ 2967.979624]  do_sys_openat2+0xf9/0x420
[ 2967.980420]  ? build_open_flags+0x6f0/0x6f0
[ 2967.981308]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2967.982264]  __x64_sys_openat+0x13f/0x1f0
[ 2967.983125]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2967.984003]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2967.985077]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2967.986139]  do_syscall_64+0x33/0x40
[ 2967.986904]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2967.987967] RIP: 0033:0x7f281c9d4a04
[ 2967.988729] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2967.992493] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2967.994053] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2967.995510] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2967.996957] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2967.998404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2967.999863] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:54:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000)

07:54:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

[ 2968.038885] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
07:54:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0)

07:54:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x56}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x3876)

07:54:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000)

[ 2968.139636] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
07:54:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:33 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 24)

07:54:33 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 2983.387801] FAULT_INJECTION: forcing a failure.
[ 2983.387801] name failslab, interval 1, probability 0, space 0, times 0
[ 2983.389082] CPU: 1 PID: 16550 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2983.389814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2983.390719] Call Trace:
[ 2983.391018]  dump_stack+0x107/0x167
[ 2983.391426]  should_fail.cold+0x5/0xa
[ 2983.391848]  ? getname_flags.part.0+0x50/0x4f0
[ 2983.392346]  should_failslab+0x5/0x20
[ 2983.392757]  kmem_cache_alloc+0x5b/0x310
[ 2983.393194]  getname_flags.part.0+0x50/0x4f0
[ 2983.393671]  getname+0x8e/0xd0
[ 2983.394021]  do_sys_openat2+0xf9/0x420
[ 2983.394439]  ? build_open_flags+0x6f0/0x6f0
[ 2983.394912]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2983.395412]  __x64_sys_openat+0x13f/0x1f0
[ 2983.395856]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2983.396319]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2983.396882]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2983.397457]  do_syscall_64+0x33/0x40
[ 2983.397854]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2983.398406] RIP: 0033:0x7f281c9d4a04
[ 2983.398806] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2983.400820] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2983.401629] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2983.402428] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2983.403234] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2983.404026] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2983.404823] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:54:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff)

07:54:33 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x2, 0x0, 0x0)

07:54:33 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:33 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip_vti0\x00'})

07:54:33 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:54:33 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x3f00)

07:54:33 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xfc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:33 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff)

07:54:33 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 25)

[ 2983.524843] FAULT_INJECTION: forcing a failure.
[ 2983.524843] name failslab, interval 1, probability 0, space 0, times 0
[ 2983.526127] CPU: 1 PID: 16584 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2983.526863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2983.527753] Call Trace:
[ 2983.528056]  dump_stack+0x107/0x167
[ 2983.528452]  should_fail.cold+0x5/0xa
[ 2983.528863]  ? __alloc_file+0x21/0x320
[ 2983.529283]  should_failslab+0x5/0x20
[ 2983.529692]  kmem_cache_alloc+0x5b/0x310
[ 2983.530131]  __alloc_file+0x21/0x320
[ 2983.530535]  alloc_empty_file+0x6d/0x170
[ 2983.530976]  path_openat+0xe3/0x26f0
[ 2983.531403]  ? path_lookupat+0x860/0x860
[ 2983.531849]  ? perf_trace_lock+0xac/0x490
[ 2983.532292]  ? SOFTIRQ_verbose+0x10/0x10
[ 2983.532735]  ? __lockdep_reset_lock+0x180/0x180
[ 2983.533236]  do_filp_open+0x190/0x3e0
[ 2983.533644]  ? may_open_dev+0xf0/0xf0
[ 2983.534065]  ? __alloc_fd+0x2b8/0x630
[ 2983.534472]  ? lock_downgrade+0x6d0/0x6d0
[ 2983.534923]  ? do_raw_spin_lock+0x121/0x260
[ 2983.535386]  ? rwlock_bug.part.0+0x90/0x90
[ 2983.535862]  ? _raw_spin_unlock+0x1a/0x30
[ 2983.536305]  ? __alloc_fd+0x2b8/0x630
[ 2983.536719]  do_sys_openat2+0x171/0x420
[ 2983.537147]  ? build_open_flags+0x6f0/0x6f0
[ 2983.537613]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2983.538112]  __x64_sys_openat+0x13f/0x1f0
[ 2983.538557]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2983.539011]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2983.539593]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2983.540140]  do_syscall_64+0x33/0x40
[ 2983.540539]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2983.541082] RIP: 0033:0x7f281c9d4a04
[ 2983.541474] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2983.543473] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2983.544322] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2983.545115] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2983.545912] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2983.546703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2983.547501] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:54:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = syz_io_uring_complete(0x0)
ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000040))
r3 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r4 = dup(r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x96)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r4}, r5, 0x0, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000005000000000000000100000000000000050000000000000012150000000000000500000000000000b900000000000000d53600000000000040000000000000000100000000000000080000000000000000000080000000003c000000000000000080000000000000"]}, @devid})

07:54:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x80)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x3a, 0x1, 0x4, "424d1aba32cf81811fbefa5e1d4b35ae537b4f3077bc368258a5c4d9a3c82909e8852bf9aac1b63489129656763adfa548779df340b885d69331"})
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:54:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)

07:54:49 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:49 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x5, 0x0, 0x0)

07:54:49 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 26)

07:54:49 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x4000)

[ 2998.835832] FAULT_INJECTION: forcing a failure.
[ 2998.835832] name failslab, interval 1, probability 0, space 0, times 0
[ 2998.838286] CPU: 0 PID: 16605 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2998.839725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2998.841439] Call Trace:
[ 2998.841995]  dump_stack+0x107/0x167
[ 2998.842752]  should_fail.cold+0x5/0xa
[ 2998.843556]  ? create_object.isra.0+0x3a/0xa20
[ 2998.844490]  should_failslab+0x5/0x20
[ 2998.845267]  kmem_cache_alloc+0x5b/0x310
[ 2998.846100]  create_object.isra.0+0x3a/0xa20
[ 2998.847001]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2998.848063]  kmem_cache_alloc+0x159/0x310
[ 2998.848918]  __alloc_file+0x21/0x320
[ 2998.849685]  alloc_empty_file+0x6d/0x170
[ 2998.850511]  path_openat+0xe3/0x26f0
[ 2998.851279]  ? path_lookupat+0x860/0x860
[ 2998.852122]  ? perf_trace_lock+0xac/0x490
[ 2998.852957]  ? SOFTIRQ_verbose+0x10/0x10
[ 2998.853791]  ? __lockdep_reset_lock+0x180/0x180
[ 2998.854729]  do_filp_open+0x190/0x3e0
[ 2998.855521]  ? may_open_dev+0xf0/0xf0
[ 2998.856301]  ? __alloc_fd+0x2b8/0x630
[ 2998.857087]  ? lock_downgrade+0x6d0/0x6d0
[ 2998.857940]  ? do_raw_spin_lock+0x121/0x260
[ 2998.858822]  ? rwlock_bug.part.0+0x90/0x90
[ 2998.859706]  ? _raw_spin_unlock+0x1a/0x30
[ 2998.860544]  ? __alloc_fd+0x2b8/0x630
[ 2998.861327]  do_sys_openat2+0x171/0x420
[ 2998.862134]  ? build_open_flags+0x6f0/0x6f0
[ 2998.863030]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2998.863986]  __x64_sys_openat+0x13f/0x1f0
[ 2998.864831]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2998.865700]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2998.866771]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2998.867841]  do_syscall_64+0x33/0x40
[ 2998.868595]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2998.869643] RIP: 0033:0x7f281c9d4a04
[ 2998.870403] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2998.874132] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2998.875707] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2998.877155] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2998.878606] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2998.880062] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2998.881507] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:54:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x5dc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:49 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x7638)

07:54:49 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f00000000c0)=0xc)
fcntl$lock(r3, 0x27, &(0x7f0000000100)={0x0, 0x2, 0x7f, 0x3, r4})
r5 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x96)
r6 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r7 = dup(r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x96)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x96)
r8 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r8)
write$binfmt_aout(r8, &(0x7f00000003c0)=ANY=[], 0x126)
read(r8, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0xfe}}, './file0\x00'})
write$tun(r7, &(0x7f0000000040)={@val={0x0, 0x7}, @val={0x2, 0x80, 0x3, 0x9, 0x40, 0x8}, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x34)

07:54:49 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)

07:54:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xe00}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:49 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xc00c)

07:54:49 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400200, 0x0, 0x2}, 0x18)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x6, 0x4)
r3 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x100000001, 0x5, &(0x7f0000000780)=[{&(0x7f0000000340)="31b20390d6f008bdccd01ee63e1edff2202f7162024ebf759007d24f92dee3e64d47437758fde00985b3f2f4ac8b372ccd32dcace68b09372fcbe939f5019e33c0993ba5131b087c7bd6e9ec4166a86efc41ab597cae3f8a42a91767db1aa8d13d6745b331135a672811d7965ff77c622c0c698b88509d6b04c1ee38464bde2bd2e0b7dee9b9677546dc659c7e909f07b711b2dc132875b60dea647731ff83dde4c90a7a1df24674a80d609035f6edb6a91162cebc4f", 0xb6, 0xfffffffffffffe01}, {&(0x7f0000000400)="ea3d8e6c3b236daf5df83e9dea13e4d29286bc63ae4f4c961b3912ba9731a0c80bcb196985ef5a40770b7fea5d4bdf754e395bf6d2b9c1a3152030f47900dad33e6ec67bbc10cb05cc0f6066672b1ae3cbe9c595331d4bba92c44672e8c4a18c62cc018a13b2bd11bbf1c51fd6469c2121ff8b25e8c04f0b0ea4d382784136244354600bd45439a46f38f6e310839444db2b4ebbd507259ea265fe1a6e33258a00a52ac74de2f4473634bca17be55280c8a48cb75a78d700e03f02b0a4bf208d7a5b8eddfc3c979392c6c062c661f98d22a0c030419b66", 0xd7}, {&(0x7f0000000500)="3ac13941cc458d15e08e78112930640466f16c70579bc0d9cb18c5b6f8e6476cc83e725ba8e948f600e9f6f5e4378358956b0ab04529816994434f6ac819f9d3f1b86e29654a439162ddd057a5dfb559c3e5a5bf7e960c2c43cd868a47d2b737d6a541f56bc96c25e9b75d5d01067ef3b0a965d97110440adcddb2dc2bb26b53dafa3f68f9348acf15ccf6556a0a81be1a4e3aadd67910fde80273", 0x9b, 0x4}, {&(0x7f00000005c0)="ba80963f8a9d6fd4beb32c75d99cf7dba48353f4cd55a8b21b9b282bf3d53ac5f6dfbc25acddc4f26ec14b3c394e2646b972082d150d57854e09844f805fcc9fc80c1be5b43b825cb3d234ae3bdcecedc0560875680573c65e7cffb6636495b9265e46d34c4917e13b128a838d35093703e59b49f3cca022379078044a0cd5a359b12388ae1b41f42a9c4c58ddc3cff44adbe7313ae66204aae42e2a826183684cc28e2ee2e9deda20b50746a999dba9ca21067973b8486fc834cfd7de3837a8aeb03a9c8952a0ebdae61b7cc8a4ee80b6a3c42718", 0xd5, 0xff}, {&(0x7f00000006c0)="e7f445ac33b1ba3ad5f07a16c54f266c80fbcba783d66531060910023c2186251a53165c696a3e600df24d191f0b44b50f157769f94b4085f4eea7a575b46f364a6bfe1004995a74c17b018f570eb905aebc74ef42f89757b6b5333401dbdb8812bbfc1bdfd21e137613285a951c81ee9e533103a5044690018755acef710030422162dcc9a2aae3fe5560103af7a871e574191bdb71e7ba473a2c", 0x9b}], 0x40000, &(0x7f0000000800)={[{'/dev/sg#\x00'}, {'\x00\x00'}, {'/dev/sg#\x00'}, {'%'}, {'\xfe^{,()'}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '/dev/sg#\x00'}}, {@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_type}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]})
openat(r3, &(0x7f0000000040)='./file0\x00', 0x3e41fd09f4faa4d7, 0x20)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x30}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x404c800)

07:54:49 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 27)

07:54:49 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:54:49 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x1100}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:54:49 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x8, 0x0, 0x0)

07:54:49 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_io_uring_setup(0x12ef, &(0x7f0000000000)={0x0, 0xd222, 0x8, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x4000010, r3, 0x8000000)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000002a40))
syz_io_uring_setup(0x3253, &(0x7f0000000100)={0x0, 0x65f1, 0x4, 0x0, 0x1e5, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000002a40)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x82}}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, {0x0, r7}}, 0x967)
r8 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
dup(r8)
write$binfmt_aout(r8, &(0x7f00000003c0)=ANY=[], 0x126)
read(r8, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x101)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2999.310115] FAULT_INJECTION: forcing a failure.
[ 2999.310115] name failslab, interval 1, probability 0, space 0, times 0
[ 2999.312526] CPU: 0 PID: 16662 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 2999.313940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2999.315652] Call Trace:
[ 2999.316203]  dump_stack+0x107/0x167
[ 2999.316947]  should_fail.cold+0x5/0xa
[ 2999.317728]  ? security_file_alloc+0x34/0x170
[ 2999.318639]  should_failslab+0x5/0x20
[ 2999.319419]  kmem_cache_alloc+0x5b/0x310
[ 2999.320260]  security_file_alloc+0x34/0x170
[ 2999.321139]  __alloc_file+0xb6/0x320
[ 2999.321895]  alloc_empty_file+0x6d/0x170
[ 2999.322717]  path_openat+0xe3/0x26f0
[ 2999.323493]  ? path_lookupat+0x860/0x860
[ 2999.324317]  ? perf_trace_lock+0xac/0x490
[ 2999.325156]  ? SOFTIRQ_verbose+0x10/0x10
[ 2999.325978]  ? __lockdep_reset_lock+0x180/0x180
[ 2999.326927]  do_filp_open+0x190/0x3e0
[ 2999.327709]  ? may_open_dev+0xf0/0xf0
[ 2999.328499]  ? __alloc_fd+0x2b8/0x630
[ 2999.329278]  ? lock_downgrade+0x6d0/0x6d0
[ 2999.330128]  ? do_raw_spin_lock+0x121/0x260
[ 2999.331015]  ? rwlock_bug.part.0+0x90/0x90
[ 2999.331897]  ? _raw_spin_unlock+0x1a/0x30
[ 2999.332748]  ? __alloc_fd+0x2b8/0x630
[ 2999.333536]  do_sys_openat2+0x171/0x420
[ 2999.334391]  ? build_open_flags+0x6f0/0x6f0
[ 2999.335342]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2999.336309]  __x64_sys_openat+0x13f/0x1f0
[ 2999.337157]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2999.338028]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2999.339127]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2999.340244]  do_syscall_64+0x33/0x40
[ 2999.341020]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 2999.342095] RIP: 0033:0x7f281c9d4a04
[ 2999.342880] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2999.346697] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2999.348305] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 2999.349750] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 2999.351238] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 2999.352755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2999.354254] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 3014.399002] FAULT_INJECTION: forcing a failure.
[ 3014.399002] name failslab, interval 1, probability 0, space 0, times 0
[ 3014.400696] CPU: 0 PID: 16688 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3014.401637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3014.402758] Call Trace:
[ 3014.403128]  dump_stack+0x107/0x167
[ 3014.403626]  should_fail.cold+0x5/0xa
[ 3014.404139]  ? create_object.isra.0+0x3a/0xa20
[ 3014.404763]  should_failslab+0x5/0x20
[ 3014.405286]  kmem_cache_alloc+0x5b/0x310
[ 3014.405834]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 3014.406582]  create_object.isra.0+0x3a/0xa20
[ 3014.407327]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3014.408206]  kmem_cache_alloc+0x159/0x310
[ 3014.408777]  security_file_alloc+0x34/0x170
[ 3014.409363]  __alloc_file+0xb6/0x320
[ 3014.409871]  alloc_empty_file+0x6d/0x170
[ 3014.410421]  path_openat+0xe3/0x26f0
[ 3014.410932]  ? path_lookupat+0x860/0x860
[ 3014.411484]  ? perf_trace_lock+0xac/0x490
[ 3014.412041]  ? SOFTIRQ_verbose+0x10/0x10
[ 3014.412595]  ? __lockdep_reset_lock+0x180/0x180
[ 3014.413211]  do_filp_open+0x190/0x3e0
[ 3014.413726]  ? may_open_dev+0xf0/0xf0
[ 3014.414241]  ? __alloc_fd+0x2b8/0x630
[ 3014.414754]  ? lock_downgrade+0x6d0/0x6d0
[ 3014.415312]  ? do_raw_spin_lock+0x121/0x260
[ 3014.415911]  ? rwlock_bug.part.0+0x90/0x90
[ 3014.416492]  ? _raw_spin_unlock+0x1a/0x30
[ 3014.417044]  ? __alloc_fd+0x2b8/0x630
[ 3014.417569]  do_sys_openat2+0x171/0x420
[ 3014.418116]  ? build_open_flags+0x6f0/0x6f0
[ 3014.418709]  ? rcu_read_lock_any_held+0x75/0xa0
[ 3014.419336]  __x64_sys_openat+0x13f/0x1f0
[ 3014.419898]  ? __ia32_sys_open+0x1c0/0x1c0
[ 3014.420472]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3014.421174]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 3014.421871]  do_syscall_64+0x33/0x40
[ 3014.422374]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3014.423067] RIP: 0033:0x7f281c9d4a04
[ 3014.423570] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 3014.426055] RSP: 002b:00007f2819f96ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 3014.427075] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281c9d4a04
[ 3014.428047] RDX: 0000000000000002 RSI: 00007f2819f97000 RDI: 00000000ffffff9c
[ 3014.428992] RBP: 00007f2819f97000 R08: 0000000000000000 R09: ffffffffffffffff
[ 3014.429939] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 3014.430888] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:04 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x33f, 0x0, 0x0)

07:55:04 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)

07:55:04 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
r3 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000001440)="551a35e0b4ca237ff4c8873c8dce2802ef0256f012c5d96cdd493f83350f03d1799844b6a763ecc39e160359a13fd76ad7d529c0b3ad4159c952529bf375639ae2aaec8d66d5d95e6411b9cf90a5e78ad4c971ab668cede7679d32e3540657b629b08e61daf02c6a9191eca940ca60043a87af292fc4938f9e8e8da0ff995cae7d0f2bcca997e651ec9f4f0c67f43cf24f6931ae7e8ff64ea3813b072e117d66db90bf334d3fcd0966da07814a2c21", 0xaf, 0xfffffffffffffffd)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000080)="c3f2be1df4c60e5ade2aaa6d692b8dbaff3e753f0c80ed4ec10f51832a510835be1451592d5e52f3c5475854bc1671f6c9d33958c77b063c6cc880f3b53d4484fd16f51afaeddde885085a02ba5dcd9b45bdfe13db507d40b2cb2f4db6eaf307f72ccd4685bd87f5228d53e9fa47", 0x6e}, {&(0x7f0000001340)="67ac6463a0470bd0b5125858067c56f590faa2238433fb22b00a18a49843f29e8474bef53674aaea0d93a12b3a1a7cb6aa4df573ff417aa8c8cee2d650310883ac62c747dfd28da3f8d4cac61c1b4b39cfdc82930d6fc9864443c5c6f0c7093be28fe2f1ee0a4c7921681abb70f7051c68215f2326eea94a9b77e1d870c53de4003a92ae3dbc1900ffc0374e9ad4e15f9b6a094b821bbb164cbbd10fbed3829759cece6689c31b50ef6b00572314f03fbd4810640919be932254361f399b00719a6dc240d8c755d3b07700183c391448bbd3f65f5d81", 0xd6}], 0x3, r3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:55:04 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 28)

07:55:04 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x5600}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:04 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xcb03)

07:55:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x22eb}, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
dup3(r1, r3, 0x0)

07:55:04 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="4e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b0000000000000000"], 0x2a)

07:55:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x800000)

07:55:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x15020000)

07:55:05 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x500, 0x0, 0x0)

07:55:05 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 29)

07:55:05 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_io_uring_setup(0x12ef, &(0x7f0000000000)={0x0, 0xd222, 0x8, 0x0, 0x4000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x4000010, r2, 0x8000000)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000002a40))
syz_io_uring_setup(0x3253, &(0x7f0000000100)={0x0, 0x65f1, 0x4, 0x0, 0x1e5, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000002a40)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x82}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, {0x0, r6}}, 0x967)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index=0x9, 0x5dd800000000, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x9)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040))
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2a909b6a7f090043b23b062706cea2196cf561fb42e865830b"], 0x2a)

07:55:05 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x6000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:05 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x2000000)

07:55:05 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x80fe}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 3014.669832] FAULT_INJECTION: forcing a failure.
[ 3014.669832] name failslab, interval 1, probability 0, space 0, times 0
[ 3014.671541] CPU: 0 PID: 16739 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3014.672298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3014.673212] Call Trace:
[ 3014.673576]  dump_stack+0x107/0x167
[ 3014.673609]  should_fail.cold+0x5/0xa
[ 3014.673627]  ? __kthread_create_on_node+0xd1/0x400
07:55:05 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

[ 3014.673641]  should_failslab+0x5/0x20
[ 3014.673653]  kmem_cache_alloc_trace+0x55/0x320
[ 3014.673668]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3014.673680]  __kthread_create_on_node+0xd1/0x400
[ 3014.673693]  ? __kthread_parkme+0x1d0/0x1d0
[ 3014.673714]  ? __mutex_lock+0x4fe/0x10b0
[ 3014.673726]  ? loop_configure+0xcb5/0x1480
[ 3014.673739]  ? do_raw_spin_unlock+0x4f/0x220
[ 3014.673751]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3014.673763]  kthread_create_on_node+0xbb/0x100
[ 3014.673775]  ? __kthread_create_on_node+0x400/0x400
[ 3014.673790]  ? lockdep_init_map_type+0x2c7/0x780
[ 3014.673803]  ? lockdep_init_map_type+0x2c7/0x780
[ 3014.673821]  loop_configure+0x3e3/0x1480
[ 3014.673841]  lo_ioctl+0xa72/0x1760
[ 3014.673854]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3014.673867]  ? loop_set_status_old+0x250/0x250
[ 3014.673880]  ? avc_ss_reset+0x180/0x180
[ 3014.673893]  ? lock_acquire+0x197/0x470
[ 3014.673903]  ? find_held_lock+0x2c/0x110
[ 3014.673920]  ? __lock_acquire+0xbb1/0x5b00
[ 3014.673965]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3014.673977]  ? generic_block_fiemap+0x60/0x60
[ 3014.673994]  ? loop_set_status_old+0x250/0x250
[ 3014.674004]  blkdev_ioctl+0x291/0x710
[ 3014.674015]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3014.674028]  ? selinux_file_ioctl+0xb6/0x270
[ 3014.674043]  block_ioctl+0xf9/0x140
[ 3014.674052]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3014.674063]  __x64_sys_ioctl+0x19a/0x210
[ 3014.674078]  do_syscall_64+0x33/0x40
[ 3014.674091]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3014.674099] RIP: 0033:0x7f281ca218d7
[ 3014.674111] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3014.674117] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3014.674130] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3014.674136] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3014.674143] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3014.674149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 3014.674156] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0xcc0, 0x0, 0x0)

07:55:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xc0fe}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x5000000)

[ 3027.634085] FAULT_INJECTION: forcing a failure.
[ 3027.634085] name failslab, interval 1, probability 0, space 0, times 0
[ 3027.635736] CPU: 1 PID: 16763 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3027.636802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3027.638048] Call Trace:
[ 3027.638454]  dump_stack+0x107/0x167
[ 3027.639012]  should_fail.cold+0x5/0xa
[ 3027.639584]  ? create_object.isra.0+0x3a/0xa20
[ 3027.640281]  should_failslab+0x5/0x20
[ 3027.640871]  kmem_cache_alloc+0x5b/0x310
[ 3027.641487]  create_object.isra.0+0x3a/0xa20
[ 3027.642134]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3027.642910]  kmem_cache_alloc_trace+0x151/0x320
[ 3027.643610]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3027.644347]  __kthread_create_on_node+0xd1/0x400
[ 3027.645024]  ? __kthread_parkme+0x1d0/0x1d0
[ 3027.645660]  ? __mutex_lock+0x4fe/0x10b0
[ 3027.646248]  ? loop_configure+0xcb5/0x1480
[ 3027.646876]  ? do_raw_spin_unlock+0x4f/0x220
[ 3027.647514]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3027.648226]  kthread_create_on_node+0xbb/0x100
[ 3027.648903]  ? __kthread_create_on_node+0x400/0x400
[ 3027.649648]  ? lockdep_init_map_type+0x2c7/0x780
[ 3027.650321]  ? lockdep_init_map_type+0x2c7/0x780
[ 3027.651037]  loop_configure+0x3e3/0x1480
[ 3027.651618]  lo_ioctl+0xa72/0x1760
[ 3027.652165]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3027.652891]  ? loop_set_status_old+0x250/0x250
[ 3027.653578]  ? avc_ss_reset+0x180/0x180
[ 3027.654176]  ? lock_acquire+0x197/0x470
[ 3027.654775]  ? find_held_lock+0x2c/0x110
[ 3027.655395]  ? __lock_acquire+0xbb1/0x5b00
[ 3027.656095]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3027.656890]  ? generic_block_fiemap+0x60/0x60
[ 3027.657572]  ? loop_set_status_old+0x250/0x250
[ 3027.658253]  blkdev_ioctl+0x291/0x710
[ 3027.658821]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3027.659527]  ? selinux_file_ioctl+0xb6/0x270
[ 3027.660195]  block_ioctl+0xf9/0x140
[ 3027.660738]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3027.661383]  __x64_sys_ioctl+0x19a/0x210
[ 3027.661995]  do_syscall_64+0x33/0x40
[ 3027.662550]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3027.663311] RIP: 0033:0x7f281ca218d7
[ 3027.663874] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3027.666611] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3027.667752] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3027.668824] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3027.669882] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3027.670933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
07:55:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:55:18 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 30)

07:55:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)

07:55:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
readahead(r3, 0xde0, 0x4a7)

[ 3027.672003] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:18 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:55:18 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xdc05}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x8000000)

07:55:18 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)

07:55:18 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:55:18 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x2000, 0x0, 0x0)

07:55:18 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x20000000)

07:55:18 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:31 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 31)

07:55:31 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000)

07:55:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x64350000)

07:55:31 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x40004, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x81, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:55:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x3b48, 0x0, 0x0)

07:55:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xfc00}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:31 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x6004}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @remote, @broadcast, @private=0xa010102}}, 0x20)

[ 3041.177143] FAULT_INJECTION: forcing a failure.
[ 3041.177143] name failslab, interval 1, probability 0, space 0, times 0
[ 3041.179775] CPU: 0 PID: 16848 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3041.181307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3041.183079] Call Trace:
[ 3041.183653]  dump_stack+0x107/0x167
[ 3041.184448]  should_fail.cold+0x5/0xa
[ 3041.185270]  ? __kthread_create_on_node+0xd1/0x400
[ 3041.186297]  should_failslab+0x5/0x20
[ 3041.187109]  kmem_cache_alloc_trace+0x55/0x320
[ 3041.188111]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3041.189123]  __kthread_create_on_node+0xd1/0x400
[ 3041.190134]  ? __kthread_parkme+0x1d0/0x1d0
[ 3041.191068]  ? __mutex_lock+0x4fe/0x10b0
[ 3041.191946]  ? loop_configure+0xcb5/0x1480
[ 3041.192850]  ? do_raw_spin_unlock+0x4f/0x220
[ 3041.193799]  ? loop_info64_to_compat+0x5f0/0x5f0
[ 3041.194809]  kthread_create_on_node+0xbb/0x100
[ 3041.195797]  ? __kthread_create_on_node+0x400/0x400
[ 3041.196880]  ? lockdep_init_map_type+0x2c7/0x780
[ 3041.197910]  ? lockdep_init_map_type+0x2c7/0x780
[ 3041.198945]  loop_configure+0x3e3/0x1480
[ 3041.199831]  lo_ioctl+0xa72/0x1760
[ 3041.200638]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3041.201691]  ? loop_set_status_old+0x250/0x250
[ 3041.201718]  ? avc_ss_reset+0x180/0x180
[ 3041.201742]  ? lock_acquire+0x197/0x470
[ 3041.201761]  ? find_held_lock+0x2c/0x110
[ 3041.201795]  ? __lock_acquire+0xbb1/0x5b00
[ 3041.201880]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3041.201902]  ? generic_block_fiemap+0x60/0x60
[ 3041.201936]  ? loop_set_status_old+0x250/0x250
[ 3041.208841]  blkdev_ioctl+0x291/0x710
[ 3041.209660]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3041.210680]  ? selinux_file_ioctl+0xb6/0x270
[ 3041.211633]  block_ioctl+0xf9/0x140
[ 3041.212421]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3041.213349]  __x64_sys_ioctl+0x19a/0x210
[ 3041.214233]  do_syscall_64+0x33/0x40
[ 3041.215038]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3041.216158] RIP: 0033:0x7f281ca218d7
[ 3041.216960] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3041.220890] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3041.222535] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3041.224074] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3041.225612] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3041.227137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 3041.228678] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x3f00, 0x0, 0x0)

07:55:31 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x40000000)

07:55:31 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xfe80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:31 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = dup(r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x96)
getdents(r3, &(0x7f0000000040)=""/198, 0xc6)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)

07:55:31 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)

07:55:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff)

07:55:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 32)

[ 3056.673146] FAULT_INJECTION: forcing a failure.
[ 3056.673146] name failslab, interval 1, probability 0, space 0, times 0
[ 3056.675592] CPU: 0 PID: 16884 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3056.677008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3056.678692] Call Trace:
[ 3056.679238]  dump_stack+0x107/0x167
[ 3056.679982]  should_fail.cold+0x5/0xa
[ 3056.680766]  ? create_object.isra.0+0x3a/0xa20
[ 3056.681700]  should_failslab+0x5/0x20
[ 3056.682478]  kmem_cache_alloc+0x5b/0x310
[ 3056.683317]  create_object.isra.0+0x3a/0xa20
[ 3056.684230]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3056.685265]  kmem_cache_alloc+0x159/0x310
[ 3056.686117]  __kernfs_new_node+0xd4/0x860
[ 3056.686961]  ? perf_trace_lock+0xac/0x490
[ 3056.687800]  ? perf_trace_lock+0xac/0x490
[ 3056.688656]  ? lock_chain_count+0x20/0x20
[ 3056.689497]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3056.690491]  ? __lockdep_reset_lock+0x180/0x180
[ 3056.691433]  ? __lockdep_reset_lock+0x180/0x180
[ 3056.692395]  ? update_load_avg+0x162/0x1870
[ 3056.693297]  ? find_held_lock+0x2c/0x110
[ 3056.694127]  ? set_user_nice.part.0+0x2fd/0x760
[ 3056.695085]  kernfs_create_dir_ns+0x9c/0x230
[ 3056.695998]  internal_create_group+0x793/0xb30
[ 3056.696950]  ? set_user_nice.part.0+0x2fd/0x760
[ 3056.697899]  ? sysfs_remove_group+0x170/0x170
[ 3056.698829]  ? lockdep_init_map_type+0x2c7/0x780
[ 3056.700018]  ? blk_queue_flag_set+0x22/0x30
[ 3056.700892]  ? __loop_update_dio+0x2d2/0x690
[ 3056.701793]  loop_configure+0x954/0x1480
[ 3056.702624]  lo_ioctl+0xa72/0x1760
[ 3056.703350]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3056.704336]  ? loop_set_status_old+0x250/0x250
[ 3056.705271]  ? avc_ss_reset+0x180/0x180
[ 3056.706074]  ? lock_acquire+0x197/0x470
[ 3056.706882]  ? find_held_lock+0x2c/0x110
[ 3056.707722]  ? __lock_acquire+0xbb1/0x5b00
[ 3056.708587]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 3056.709659]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3056.710738]  ? trace_hardirqs_on+0x5b/0x180
[ 3056.711661]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3056.712732]  ? generic_block_fiemap+0x60/0x60
[ 3056.713653]  ? loop_set_status_old+0x250/0x250
[ 3056.714575]  blkdev_ioctl+0x291/0x710
[ 3056.715348]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3056.716337]  ? selinux_file_ioctl+0xb6/0x270
[ 3056.717246]  block_ioctl+0xf9/0x140
[ 3056.717991]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3056.718868]  __x64_sys_ioctl+0x19a/0x210
[ 3056.719699]  do_syscall_64+0x33/0x40
[ 3056.719723]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3056.719746] RIP: 0033:0x7f281ca218d7
[ 3056.722319] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3056.726076] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3056.727626] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3056.729089] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3056.730550] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3056.732009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 3056.733471] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:47 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xfec0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:55:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0xa, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xbd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)

07:55:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x76380000)

07:55:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x3f03, 0x0, 0x0)

07:55:47 executing program 0:
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4, 0x4, 0x40, 0x8, 0x0, 0xcd5, 0x8410, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffff7e1, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x9030, 0xffff, 0x8, 0x9, 0x3, 0x5, 0xfff8, 0x0, 0x3, 0x0, 0x100000000}, 0xffffffffffffffff, 0x5, r3, 0x2)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:55:47 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 33)

07:55:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000554e6c54360eb64466cb2aa89b6a7fd98b43b23b062706cea2196cf561fb42e865830b46ae6fbb9d4f027738730643f068727eb89fcdccae63eec73aa4cffb637b71cdffd82575edc5fdf79c0f9c21bee6faa6a9856871850fcf2f68af50de5d8bf94dc70a22cb2497d9c984e91371d911614579d6872070521689212fd65e9d49f4d53d5b72571ce050e6d306acef928b5478944955b277679e7511e329143653398bd8ecbaa9a9375a841df0d25f15b30ede16fa93b1e8b2d5e86fbcffc9c8983169f2a46500"/216], 0x2a)

07:55:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0xff00}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

[ 3056.872926] FAULT_INJECTION: forcing a failure.
[ 3056.872926] name failslab, interval 1, probability 0, space 0, times 0
[ 3056.875901] CPU: 0 PID: 16914 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3056.877319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3056.879019] Call Trace:
[ 3056.879563]  dump_stack+0x107/0x167
[ 3056.880327]  should_fail.cold+0x5/0xa
[ 3056.881115]  ? radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3056.882290]  should_failslab+0x5/0x20
[ 3056.883058]  kmem_cache_alloc+0x5b/0x310
[ 3056.883897]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3056.885047]  idr_get_free+0x4b5/0x8f0
[ 3056.885843]  idr_alloc_u32+0x170/0x2d0
[ 3056.886633]  ? __fprop_inc_percpu_max+0x130/0x130
[ 3056.887605]  ? lock_acquire+0x197/0x470
[ 3056.888422]  ? __kernfs_new_node+0xff/0x860
[ 3056.889308]  idr_alloc_cyclic+0x102/0x230
[ 3056.890145]  ? idr_alloc+0x130/0x130
[ 3056.890903]  ? rwlock_bug.part.0+0x90/0x90
[ 3056.891774]  __kernfs_new_node+0x117/0x860
[ 3056.892635]  ? perf_trace_lock+0xac/0x490
[ 3056.893464]  ? perf_trace_lock+0xac/0x490
[ 3056.894303]  ? lock_chain_count+0x20/0x20
[ 3056.895141]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3056.896109]  ? __lockdep_reset_lock+0x180/0x180
[ 3056.897051]  ? __lockdep_reset_lock+0x180/0x180
[ 3056.897993]  ? update_load_avg+0x162/0x1870
[ 3056.898859]  ? find_held_lock+0x2c/0x110
[ 3056.899685]  ? set_user_nice.part.0+0x2fd/0x760
[ 3056.900641]  kernfs_create_dir_ns+0x9c/0x230
[ 3056.901531]  internal_create_group+0x793/0xb30
[ 3056.902457]  ? set_user_nice.part.0+0x2fd/0x760
[ 3056.903388]  ? sysfs_remove_group+0x170/0x170
[ 3056.904316]  ? lockdep_init_map_type+0x2c7/0x780
[ 3056.905277]  ? blk_queue_flag_set+0x22/0x30
[ 3056.906145]  ? __loop_update_dio+0x2d2/0x690
[ 3056.907054]  loop_configure+0x954/0x1480
[ 3056.907894]  lo_ioctl+0xa72/0x1760
[ 3056.908648]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3056.909617]  ? loop_set_status_old+0x250/0x250
[ 3056.910538]  ? avc_ss_reset+0x180/0x180
[ 3056.911341]  ? lock_acquire+0x197/0x470
[ 3056.912147]  ? find_held_lock+0x2c/0x110
[ 3056.912983]  ? __lock_acquire+0xbb1/0x5b00
[ 3056.913894]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3056.914947]  ? generic_block_fiemap+0x60/0x60
[ 3056.915856]  ? loop_set_status_old+0x250/0x250
[ 3056.916801]  blkdev_ioctl+0x291/0x710
[ 3056.917564]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3056.918549]  ? selinux_file_ioctl+0xb6/0x270
[ 3056.919440]  block_ioctl+0xf9/0x140
[ 3056.920178]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3056.921045]  __x64_sys_ioctl+0x19a/0x210
[ 3056.921872]  do_syscall_64+0x33/0x40
[ 3056.922624]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3056.923656] RIP: 0033:0x7f281ca218d7
[ 3056.924413] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3056.928108] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3056.929636] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3056.931063] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3056.932500] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3056.933925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 3056.935349] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
07:55:47 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000)

07:55:47 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x4000, 0x0, 0x0)

07:55:47 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:55:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffff8000)

07:55:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@val, @void, @x25={0x0, 0x0, 0x0, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x2a)
write(r0, &(0x7f0000000040)="2e00c6af33554d5bcf05bf928d885a39420bf317025b486f3aaa7d567a1c214a25588a69a88fdfacabc2964b05ca73018ca6043c6a608aa84fe20675ec66f97b07ecccaac23bcd64c5e82404eb3aa74db2e1602cc92e444ed6f6b841696c84fb51a8944cbaa4d360dc86e9697f9244e97216f196d2420af91385c08dcea89dc9a6d53db469b7810855c5778e0de52d69b403bf00802232e9f3ff943e74c8402f3cdff38c69e633716c1513c021a5cc171e0a2e163c6ec54fef0d056e0825cb4b94e00266783f5d63062b2df1a582faf6", 0xd0)

07:55:47 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x126)
read(r0, 0x0, 0x0)
io_setup(0x800, &(0x7f0000000100)=<r2=>0x0)
io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xf3f70619688df2aa, 0xa04b, 0xffffffffffffffff, &(0x7f0000000340)="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", 0x1000, 0x39b, 0x0, 0x3, r1}, &(0x7f00000001c0))
fsetxattr$security_capability(r1, &(0x7f0000000280), &(0x7f0000001340)=@v3={0x3000000, [{0x7, 0xfffffff7}, {0xf8f}], 0xee01}, 0x18, 0x3)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000080)=""/2, 0x2})
syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 3057.059438] sg_write: data in/out 1531794703/160 bytes for SCSI command 0xa8-- guessing data in;
[ 3057.059438]    program syz-executor.4 not setting count and/or reply_len properly
07:55:47 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffc000)

07:55:47 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x34000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:56:00 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011500)='\"', 0x1, 0xe000}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]}) (fail_nth: 34)

07:56:00 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r1)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r1)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x1, 0xff, 0x7, 0x0, 0x68879a99, 0x440, 0x235cb346bdf9e39f, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x2, 0x29, 0x101, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xb)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1)
add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000440)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x2a44000, &(0x7f0000000600)=ANY=[@ANYBLOB="d06c58965264116e6077f95d64dcc93934fccacbb58e8b46b2452cd95fa8b02978f7a2a41b8610f3341899a8ba292490d8000022df95d83d193aae4b153ab3b69a082d36bfa9b42feaf64b33f563c9cd6ed22fbca9c484e24275466316917dd882d8229ca381cab5eb54efbd5ae15b88c03ad9042b2f44663c64a7161dbaf51e21c4304619e15fffda4d285457899965c7a1119837cb56950bd53d9bd3888e0bb7c03069decccb0100d11fd2abdf2d3c6bdcaa13aae5ef84728a72bcc60f59e4831813f61bec9c6062a16e17d7a6a1b76aca1de11b44fc3c15506a8948cb8bc214ed"])
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000004c0)='.dead\x00', 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

07:56:00 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4)

07:56:00 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
write$tun(r1, &(0x7f0000000180)={@void, @void, @x25={0x0, 0x0, 0x1f, "554e6c54360eb64466cb2a909b6a7fd98b43b23b062706cea2196cf561fb42e865830b"}}, 0x26)

07:56:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$sg(0x0, 0x0, 0x101002)
r2 = dup(r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe4)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0})
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x58ab, 0x0, 0x483b, 0x0, 0x0)

07:56:00 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x126)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}}], 0x2, 0x0)

07:56:00 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x6616, 0x7fff, 0x0, 0xb8ef, 0xffffffffffffffff})
r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

07:56:00 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x101002)
r1 = dup(r0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x96)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe4)
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0xcb030000)

[ 3070.037860] FAULT_INJECTION: forcing a failure.
[ 3070.037860] name failslab, interval 1, probability 0, space 0, times 0
[ 3070.039244] CPU: 1 PID: 16964 Comm: syz-executor.6 Not tainted 5.10.194 #1
[ 3070.040024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3070.040962] Call Trace:
[ 3070.041284]  dump_stack+0x107/0x167
[ 3070.041698]  should_fail.cold+0x5/0xa
[ 3070.042130]  ? create_object.isra.0+0x3a/0xa20
[ 3070.042655]  should_failslab+0x5/0x20
[ 3070.043093]  kmem_cache_alloc+0x5b/0x310
[ 3070.043554]  create_object.isra.0+0x3a/0xa20
[ 3070.044049]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 3070.044644]  kmem_cache_alloc+0x159/0x310
[ 3070.045130]  radix_tree_node_alloc.constprop.0+0x1e3/0x300
[ 3070.045764]  idr_get_free+0x4b5/0x8f0
[ 3070.046204]  idr_alloc_u32+0x170/0x2d0
[ 3070.046658]  ? __fprop_inc_percpu_max+0x130/0x130
[ 3070.047231]  ? lock_acquire+0x197/0x470
[ 3070.047718]  ? __kernfs_new_node+0xff/0x860
[ 3070.048535]  idr_alloc_cyclic+0x102/0x230
[ 3070.048582]  ? idr_alloc+0x130/0x130
[ 3070.048594]  ? rwlock_bug.part.0+0x90/0x90
[ 3070.048615]  __kernfs_new_node+0x117/0x860
[ 3070.048625]  ? perf_trace_lock+0xac/0x490
[ 3070.048635]  ? perf_trace_lock+0xac/0x490
[ 3070.048647]  ? lock_chain_count+0x20/0x20
[ 3070.048659]  ? kernfs_dop_revalidate+0x3a0/0x3a0
[ 3070.048670]  ? __lockdep_reset_lock+0x180/0x180
[ 3070.048680]  ? __lockdep_reset_lock+0x180/0x180
[ 3070.048692]  ? task_rq_lock+0xab/0x270
[ 3070.048706]  ? lock_release+0x680/0x680
[ 3070.048717]  ? find_held_lock+0x2c/0x110
[ 3070.048733]  ? set_user_nice.part.0+0x2fd/0x760
[ 3070.048749]  kernfs_create_dir_ns+0x9c/0x230
[ 3070.048765]  internal_create_group+0x793/0xb30
[ 3070.048781]  ? set_user_nice.part.0+0x2fd/0x760
[ 3070.048792]  ? sysfs_remove_group+0x170/0x170
[ 3070.048806]  ? lockdep_init_map_type+0x2c7/0x780
[ 3070.048821]  ? blk_queue_flag_set+0x22/0x30
[ 3070.048832]  ? __loop_update_dio+0x2d2/0x690
[ 3070.048847]  loop_configure+0x954/0x1480
[ 3070.048868]  lo_ioctl+0xa72/0x1760
[ 3070.048882]  ? avc_has_extended_perms+0x7f1/0xf40
[ 3070.048897]  ? loop_set_status_old+0x250/0x250
[ 3070.048912]  ? avc_ss_reset+0x180/0x180
[ 3070.048925]  ? lock_acquire+0x197/0x470
[ 3070.048935]  ? find_held_lock+0x2c/0x110
[ 3070.048955]  ? __lock_acquire+0xbb1/0x5b00
[ 3070.049003]  ? selinux_bprm_creds_for_exec+0xb60/0xb60
[ 3070.049016]  ? generic_block_fiemap+0x60/0x60
[ 3070.049035]  ? loop_set_status_old+0x250/0x250
[ 3070.049045]  blkdev_ioctl+0x291/0x710
[ 3070.049057]  ? blkdev_common_ioctl+0x1870/0x1870
[ 3070.049072]  ? selinux_file_ioctl+0xb6/0x270
[ 3070.049087]  block_ioctl+0xf9/0x140
[ 3070.049097]  ? blkdev_read_iter+0x1c0/0x1c0
[ 3070.049110]  __x64_sys_ioctl+0x19a/0x210
[ 3070.049127]  do_syscall_64+0x33/0x40
[ 3070.049140]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3070.049149] RIP: 0033:0x7f281ca218d7
[ 3070.049162] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3070.049169] RSP: 002b:00007f2819f96f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3070.049182] RAX: ffffffffffffffda RBX: 00007f281ca6b970 RCX: 00007f281ca218d7
[ 3070.049189] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[ 3070.049196] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff
[ 3070.049203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 3070.049210] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003
[ 3073.740052] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3073.741903] CPU: 1 PID: 5843 Comm: syz-fuzzer Not tainted 5.10.194 #1
[ 3073.742824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3073.743955] Call Trace:
[ 3073.744267]  dump_stack+0x107/0x167
[ 3073.744677]  dump_header+0x106/0x65e
[ 3073.745086]  oom_kill_process.cold+0x10/0x15
[ 3073.745567]  out_of_memory+0x1149/0x1440
[ 3073.746019]  ? oom_killer_disable+0x280/0x280
[ 3073.746507]  ? mutex_trylock+0x237/0x2b0
[ 3073.746946]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 3073.747588]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 3073.748232]  ? lock_acquire+0x117/0x470
[ 3073.748679]  ? warn_alloc+0x190/0x190
[ 3073.749106]  __alloc_pages_nodemask+0x51d/0x600
[ 3073.749606]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3073.750251]  ? find_get_entry+0x2c8/0x740
[ 3073.750704]  alloc_pages_current+0x187/0x280
[ 3073.751177]  __page_cache_alloc+0x2d2/0x360
[ 3073.751650]  pagecache_get_page+0x2c7/0xc80
[ 3073.752117]  filemap_fault+0x177d/0x2210
[ 3073.752575]  ? read_cache_page_gfp+0x30/0x30
[ 3073.753051]  ? replace_page_cache_page+0x1200/0x1200
[ 3073.753673]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3073.754320]  ext4_filemap_fault+0x87/0xc0
[ 3073.754827]  __do_fault+0x113/0x410
[ 3073.755275]  handle_mm_fault+0x1e53/0x3500
[ 3073.755798]  ? irqentry_enter+0x26/0x60
[ 3073.756269]  ? find_held_lock+0x2c/0x110
[ 3073.756769]  ? __pmd_alloc+0x5e0/0x5e0
[ 3073.757229]  ? vmacache_find+0x55/0x2a0
[ 3073.757701]  do_user_addr_fault+0x56e/0xc60
[ 3073.758203]  exc_page_fault+0xa2/0x1a0
[ 3073.758643]  ? asm_exc_page_fault+0x8/0x30
[ 3073.759130]  asm_exc_page_fault+0x1e/0x30
[ 3073.759596] RIP: 0033:0x88de49
[ 3073.759966] Code: Unable to access opcode bytes at RIP 0x88de1f.
[ 3073.760671] RSP: 002b:000000c0001d7740 EFLAGS: 00010202
[ 3073.761274] RAX: 000000c00000dda0 RBX: 000002eb76eda0d4 RCX: 0000000000eab3e0
[ 3073.762076] RDX: 000000c00037c530 RSI: c1382471e305c2cb RDI: 00000001ffffffff
[ 3073.762882] RBP: 000000c0001d77c8 R08: 000000002305c2cb R09: 00007ffeb6e51080
[ 3073.763685] R10: 00007ffeb6e51090 R11: 0000000000577340 R12: 00000000000000f2
[ 3073.764512] R13: 0000000000000000 R14: 0000000000e5db66 R15: 0000000000000000
[ 3073.765478] Mem-Info:
[ 3073.765805] active_anon:6896 inactive_anon:56946 isolated_anon:0
[ 3073.765805]  active_file:15 inactive_file:10 isolated_file:0
[ 3073.765805]  unevictable:0 dirty:0 writeback:0
[ 3073.765805]  slab_reclaimable:8619 slab_unreclaimable:62058
[ 3073.765805]  mapped:69655 shmem:103 pagetables:1738 bounce:0
[ 3073.765805]  free:2978 free_pcp:62 free_cma:0
[ 3073.769488] Node 0 active_anon:27584kB inactive_anon:227784kB active_file:60kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278620kB dirty:0kB writeback:0kB shmem:412kB writeback_tmp:0kB kernel_stack:4448kB all_unreclaimable? yes
[ 3073.772234] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3073.775302] lowmem_reserve[]: 0 1616 1616 1616
[ 3073.775887] Node 0 DMA32 free:5404kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:27584kB inactive_anon:227784kB active_file:120kB inactive_file:88kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:6952kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB
[ 3073.779302] lowmem_reserve[]: 0 0 0 0
[ 3073.779798] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB
[ 3073.781523] Node 0 DMA32: 498*4kB (UME) 165*8kB (M) 60*16kB (UME) 22*32kB (UME) 10*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5872kB
[ 3073.783309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3073.784317] 167 total pagecache pages
[ 3073.784789] 0 pages in swap cache
[ 3073.785195] Swap cache stats: add 0, delete 0, find 0/0
[ 3073.785836] Free swap  = 0kB
[ 3073.786192] Total swap = 0kB
[ 3073.786565] 524158 pages RAM
[ 3073.786926] 0 pages HighMem/MovableOnly
[ 3073.787388] 105057 pages reserved
[ 3073.787809] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=5843,uid=0
[ 3073.790559] Out of memory (oom_kill_allocating_task): Killed process 256 (syz-fuzzer) total-vm:1173392kB, anon-rss:217428kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:868kB oom_score_adj:0
[ 3073.814390] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3073.816593] CPU: 0 PID: 6603 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 3073.817990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3073.819674] Call Trace:
[ 3073.820224]  dump_stack+0x107/0x167
[ 3073.820994]  dump_header+0x106/0x65e
[ 3073.821819]  oom_kill_process.cold+0x10/0x15
[ 3073.822733]  out_of_memory+0x1149/0x1440
[ 3073.823579]  ? oom_killer_disable+0x280/0x280
[ 3073.824513]  ? mutex_trylock+0x237/0x2b0
[ 3073.825334]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 3073.826558]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 3073.827760]  ? lock_acquire+0x117/0x470
[ 3073.828585]  ? warn_alloc+0x190/0x190
[ 3073.829388]  __alloc_pages_nodemask+0x51d/0x600
[ 3073.830337]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3073.831558]  ? find_get_entry+0x2c8/0x740
[ 3073.832433]  alloc_pages_current+0x187/0x280
[ 3073.832593] syz-executor.0: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[ 3073.833339]  __page_cache_alloc+0x2d2/0x360
[ 3073.833448]  pagecache_get_page+0x2c7/0xc80
[ 3073.833477]  filemap_fault+0x177d/0x2210
[ 3073.834776] ,cpuset=
[ 3073.835647]  ? read_cache_page_gfp+0x30/0x30
[ 3073.835673]  ? replace_page_cache_page+0x1200/0x1200
[ 3073.836361] syz0
[ 3073.837123]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3073.837157]  ext4_filemap_fault+0x87/0xc0
[ 3073.837571] ,mems_allowed=0
[ 3073.838454]  __do_fault+0x113/0x410
[ 3073.839027] 
[ 3073.839437]  handle_mm_fault+0x1e53/0x3500
[ 3073.843323]  ? find_held_lock+0x2c/0x110
[ 3073.844158]  ? __pmd_alloc+0x5e0/0x5e0
[ 3073.844974]  ? vmacache_find+0x55/0x2a0
[ 3073.845801]  do_user_addr_fault+0x56e/0xc60
[ 3073.846697]  exc_page_fault+0xa2/0x1a0
[ 3073.847492]  ? asm_exc_page_fault+0x8/0x30
[ 3073.848358]  asm_exc_page_fault+0x1e/0x30
[ 3073.849187] RIP: 0033:0x7fca01abdf50
[ 3073.849962] Code: Unable to access opcode bytes at RIP 0x7fca01abdf26.
[ 3073.851290] RSP: 002b:00007ffdb38f5558 EFLAGS: 00010287
[ 3073.852372] RAX: 0000000000000a3a RBX: 0000000000000474 RCX: 0000000000000007
[ 3073.853826] RDX: 0000000040000001 RSI: 00007ffdb38f55bc RDI: 00000000ffffffff
[ 3073.855273] RBP: 00007ffdb38f55bc R08: 0000000000000c00 R09: 00007ffdb39b9080
[ 3073.856740] R10: 00007ffdb39b9090 R11: 0000000000576f84 R12: 0000000000000032
[ 3073.858210] R13: 00000000002edb07 R14: 0000000000000007 R15: 00007ffdb38f5620
[ 3073.859696] CPU: 1 PID: 16972 Comm: syz-executor.0 Not tainted 5.10.194 #1
[ 3073.859755] Mem-Info:
[ 3073.860399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3073.860409] Call Trace:
[ 3073.860961] active_anon:6896 inactive_anon:56946 isolated_anon:0
[ 3073.860961]  active_file:15 inactive_file:31 isolated_file:0
[ 3073.860961]  unevictable:0 dirty:0 writeback:0
[ 3073.860961]  slab_reclaimable:8619 slab_unreclaimable:62058
[ 3073.860961]  mapped:69655 shmem:103 pagetables:1738 bounce:0
[ 3073.860961]  free:2605 free_pcp:271 free_cma:0
[ 3073.861726]  dump_stack+0x107/0x167
[ 3073.861739]  warn_alloc.cold+0x95/0x18a
[ 3073.861756]  ? zone_watermark_ok_safe+0x260/0x260
[ 3073.862293] Node 0 active_anon:27584kB inactive_anon:227784kB active_file:60kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278620kB dirty:0kB writeback:0kB shmem:412kB writeback_tmp:0kB kernel_stack:4352kB all_unreclaimable? yes
[ 3073.865449]  ? schedule_timeout+0x1ce/0x380
[ 3073.865461]  ? usleep_range+0x170/0x170
[ 3073.865473]  ? __next_timer_interrupt+0x2c0/0x2c0
[ 3073.865499]  __alloc_pages_slowpath.constprop.0+0x1c80/0x2130
[ 3073.866214] Node 0 
[ 3073.866616]  ? lock_acquire+0x117/0x470
[ 3073.866636]  ? warn_alloc+0x190/0x190
[ 3073.867642] DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3073.869876]  __alloc_pages_nodemask+0x51d/0x600
[ 3073.869895]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3073.870770] lowmem_reserve[]:
[ 3073.871161]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3073.872151]  0
[ 3073.872742]  ? policy_nodemask+0x50/0x1a0
[ 3073.872757]  ? kcov_remote_stop+0x310/0x310
[ 3073.872773]  alloc_pages_current+0x187/0x280
[ 3073.873224]  1616
[ 3073.873639]  relay_open_buf.part.0+0x2a5/0xc00
[ 3073.873666]  relay_open+0x531/0xa10
[ 3073.874416]  1616
[ 3073.877025]  do_blk_trace_setup+0x4cf/0xc10
[ 3073.877039]  ? _copy_from_user+0xfb/0x1b0
[ 3073.877054]  __blk_trace_setup+0xca/0x180
[ 3073.878003]  1616
[ 3073.878546]  ? do_blk_trace_setup+0xc10/0xc10
[ 3073.878566]  ? perf_trace_lock+0xac/0x490
[ 3073.878581]  ? SOFTIRQ_verbose+0x10/0x10
[ 3073.879197] 
[ 3073.879845]  blk_trace_setup+0x43/0x60
[ 3073.879860]  sg_ioctl_common+0x634/0x2570
[ 3073.879877]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 3073.880235] Node 0 
[ 3073.880698]  ? do_vfs_ioctl+0x283/0x10d0
[ 3073.880709]  ? sg_write+0x120/0x120
[ 3073.880719]  ? generic_block_fiemap+0x60/0x60
[ 3073.880736]  ? _down_write_nest_lock+0x160/0x160
[ 3073.881647] DMA32 free:3932kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:27584kB inactive_anon:227784kB active_file:36kB inactive_file:172kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:6952kB bounce:0kB free_pcp:1084kB local_pcp:588kB free_cma:0kB
[ 3073.882072]  ? selinux_file_ioctl+0xb6/0x270
[ 3073.882504] lowmem_reserve[]:
[ 3073.882977]  ? sg_compat_ioctl+0x120/0x120
[ 3073.882992]  sg_ioctl+0x8f/0x120
[ 3073.883735]  0
[ 3073.883943]  __x64_sys_ioctl+0x19a/0x210
[ 3073.884852]  0
[ 3073.885279]  do_syscall_64+0x33/0x40
[ 3073.886127]  0
[ 3073.886331]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3073.886344] RIP: 0033:0x7fca01abfb19
[ 3073.887258]  0
[ 3073.887670] Code: Unable to access opcode bytes at RIP 0x7fca01abfaef.
[ 3073.887677] RSP: 002b:00007fc9ff035188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3073.887690] RAX: ffffffffffffffda RBX: 00007fca01bd2f60 RCX: 00007fca01abfb19
[ 3073.887703] RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000003
[ 3073.888551] 
[ 3073.888702] RBP: 00007fca01b19f6d R08: 0000000000000000 R09: 0000000000000000
[ 3073.888715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3073.889517] Node 0 
[ 3073.889916] R13: 00007ffdb38f530f R14: 00007fc9ff035300 R15: 0000000000022000
[ 3073.889963] Mem-Info:
[ 3073.890988] DMA: 
[ 3073.891225] active_anon:6896 inactive_anon:56946 isolated_anon:0
[ 3073.891225]  active_file:15 inactive_file:31 isolated_file:0
[ 3073.891225]  unevictable:0 dirty:0 writeback:0
[ 3073.891225]  slab_reclaimable:8619 slab_unreclaimable:62058
[ 3073.891225]  mapped:69655 shmem:103 pagetables:1738 bounce:0
[ 3073.891225]  free:2605 free_pcp:271 free_cma:0
[ 3073.892049] 0*4kB 
[ 3073.892430] Node 0 active_anon:27584kB inactive_anon:227784kB active_file:60kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278620kB dirty:0kB writeback:0kB shmem:412kB writeback_tmp:0kB kernel_stack:4352kB all_unreclaimable? yes
[ 3073.892440] Node 0 
[ 3073.893363] 1*8kB 
[ 3073.893866] DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3073.893877] lowmem_reserve[]:
[ 3073.899524] (U) 
[ 3073.899957]  0 1616
[ 3073.900629] 1*16kB 
[ 3073.901042]  1616 1616
[ 3073.901753] (U) 
[ 3073.901928] 
[ 3073.901938] Node 0 
[ 3073.902771] 0*32kB 
[ 3073.902966] DMA32 free:3932kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:27584kB inactive_anon:227784kB active_file:36kB inactive_file:172kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:6952kB bounce:0kB free_pcp:1084kB local_pcp:496kB free_cma:0kB
[ 3073.902975] lowmem_reserve[]:
[ 3073.903741] 1*64kB 
[ 3073.903911]  0 0
[ 3073.904993] (U) 
[ 3073.905361]  0 0
[ 3073.905766] 0*128kB 
[ 3073.906425] 
[ 3073.906436] Node 0 
[ 3073.907980] 1*256kB 
[ 3073.908736] DMA: 0*4kB 1*8kB (U) 
[ 3073.910215] (U) 
[ 3073.910378] 1*16kB (U) 
[ 3073.911850] 0*512kB 
[ 3073.912607] 0*32kB 1*64kB (U) 0*128kB 
[ 3073.913080] 0*1024kB 
[ 3073.913836] 1*256kB (U) 0*512kB 0*1024kB 1*2048kB 
[ 3073.914343] 1*2048kB 
[ 3073.914571] (M) 1*4096kB (M) = 6488kB
[ 3073.920845] (M) 
[ 3073.921059] Node 0 DMA32: 
[ 3073.925779] 1*4096kB 
[ 3073.925965] 361*4kB 
[ 3073.926395] (M) 
[ 3073.929019] (ME) 129*8kB (M) 49*16kB (UME) 
[ 3073.929683] = 6488kB
[ 3073.929887] 17*32kB (UME) 
[ 3073.930344] Node 0 
[ 3073.930599] 2*64kB (UM) 0*128kB 0*256kB 
[ 3073.931117] DMA32: 
[ 3073.931325] 0*512kB 0*1024kB 
[ 3073.931696] 361*4kB 
[ 3073.931911] 0*2048kB 0*4096kB 
[ 3073.932394] (ME) 
[ 3073.935287] = 3932kB
[ 3073.935297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3073.935302] 167 total pagecache pages
[ 3073.935312] 0 pages in swap cache
[ 3073.935969] 129*8kB 
[ 3073.936192] Swap cache stats: add 0, delete 0, find 0/0
[ 3073.936202] Free swap  = 0kB
[ 3073.936637] (M) 
[ 3073.936839] Total swap = 0kB
[ 3073.936849] 524158 pages RAM
[ 3073.937245] 49*16kB 
[ 3073.937508] 0 pages HighMem/MovableOnly
[ 3073.937513] 105057 pages reserved
[ 3073.962096] (UME) 17*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3932kB
[ 3073.964132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3073.965870] 167 total pagecache pages
[ 3073.966667] 0 pages in swap cache
[ 3073.967359] Swap cache stats: add 0, delete 0, find 0/0
[ 3073.968459] Free swap  = 0kB
[ 3073.969088] Total swap = 0kB
[ 3073.969724] 524158 pages RAM
[ 3073.970330] 0 pages HighMem/MovableOnly
[ 3073.971153] 105057 pages reserved
[ 3073.971878] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=6603,uid=0
[ 3073.974752] Out of memory (oom_kill_allocating_task): Killed process 6603 (syz-executor.0) total-vm:93280kB, anon-rss:384kB, file-rss:34568kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0
[ 3075.311856] systemd-udevd invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 3075.313231] CPU: 1 PID: 16987 Comm: systemd-udevd Not tainted 5.10.194 #1
[ 3075.313940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3075.314797] Call Trace:
[ 3075.315075]  dump_stack+0x107/0x167
[ 3075.315439]  dump_header+0x106/0x65e
[ 3075.315809]  oom_kill_process.cold+0x10/0x15
[ 3075.316249]  out_of_memory+0x1149/0x1440
[ 3075.316658]  ? oom_killer_disable+0x280/0x280
[ 3075.317102]  ? mutex_trylock+0x237/0x2b0
[ 3075.317501]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 3075.318085]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 3075.318704]  ? __switch_to_asm+0x37/0x60
[ 3075.319126]  ? warn_alloc+0x190/0x190
[ 3075.319532]  __alloc_pages_nodemask+0x51d/0x600
[ 3075.320012]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 3075.320582]  ? trace_hardirqs_on+0x5b/0x180
[ 3075.321032]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3075.321668]  ? alloc_pages_current+0x14f/0x280
[ 3075.322153]  alloc_pages_current+0x187/0x280
[ 3075.322593]  __get_free_pages+0xc/0xa0
[ 3075.322977]  inode_doinit_with_dentry+0x8f1/0x1240
[ 3075.323482]  ? show_schedstat+0x8c0/0xca0
[ 3075.323914]  ? selinux_file_lock+0x280/0x280
[ 3075.324384]  ? kernfs_get_inode+0x388/0x520
[ 3075.324840]  ? lock_downgrade+0x6d0/0x6d0
[ 3075.325274]  selinux_d_instantiate+0x23/0x30
[ 3075.325733]  security_d_instantiate+0x56/0xe0
[ 3075.326209]  d_splice_alias+0x8c/0xc60
[ 3075.326612]  ? _raw_spin_unlock+0x1a/0x30
[ 3075.327048]  kernfs_iop_lookup+0x1ac/0x220
[ 3075.327493]  __lookup_slow+0x252/0x490
[ 3075.327893]  ? lookup_open.isra.0+0x1270/0x1270
[ 3075.328387]  ? selinux_inode_permission+0x401/0x640
[ 3075.328902]  ? selinux_path_notify+0x4d0/0x4d0
[ 3075.329376]  walk_component+0x41e/0x6a0
[ 3075.329790]  ? handle_dots.part.0+0x15c0/0x15c0
[ 3075.330277]  ? security_inode_permission+0xcb/0x100
[ 3075.330793]  ? kernfs_iop_getattr+0xd0/0xd0
[ 3075.331243]  link_path_walk.part.0+0x699/0xbf0
[ 3075.331727]  ? walk_component+0x6a0/0x6a0
[ 3075.332160]  ? percpu_counter_add_batch+0x8b/0x140
[ 3075.332686]  path_openat+0x25a/0x26f0
[ 3075.333084]  ? path_lookupat+0x860/0x860
[ 3075.333507]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 3075.334047]  ? lock_acquire+0x197/0x470
[ 3075.334463]  do_filp_open+0x190/0x3e0
[ 3075.334857]  ? may_open_dev+0xf0/0xf0
[ 3075.335258]  ? do_raw_spin_lock+0x121/0x260
[ 3075.335703]  ? rwlock_bug.part.0+0x90/0x90
[ 3075.336145]  ? _raw_spin_unlock+0x1a/0x30
[ 3075.336585]  ? __alloc_fd+0x2b8/0x630
[ 3075.336981]  do_sys_openat2+0x171/0x420
[ 3075.337393]  ? seccomp_notify_ioctl+0xda0/0xda0
[ 3075.337876]  ? finish_task_switch+0x1a4/0x5d0
[ 3075.338344]  ? build_open_flags+0x6f0/0x6f0
[ 3075.338792]  ? __schedule+0x82c/0x1ea0
[ 3075.339199]  __x64_sys_openat+0x13f/0x1f0
[ 3075.339631]  ? __ia32_sys_open+0x1c0/0x1c0
[ 3075.340069]  ? __secure_computing+0xb4/0x290
[ 3075.340546]  do_syscall_64+0x33/0x40
[ 3075.340938]  entry_SYSCALL_64_after_hwframe+0x62/0xc7
[ 3075.341471] RIP: 0033:0x7f5f0f307be7
[ 3075.341858] Code: 25 00 00 41 00 3d 00 00 41 00 74 47 64 8b 04 25 18 00 00 00 85 c0 75 6b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 95 00 00 00 48 8b 4c 24 28 64 48 2b 0c 25
[ 3075.343758] RSP: 002b:00007ffe983d7220 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3075.344563] RAX: ffffffffffffffda RBX: 00005556fdc76820 RCX: 00007f5f0f307be7
[ 3075.345303] RDX: 0000000000080000 RSI: 00007ffe983d7460 RDI: 00000000ffffff9c
[ 3075.346039] RBP: 00007ffe983d7460 R08: 0000000000000008 R09: 0000000000000001
[ 3075.346776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
[ 3075.347516] R13: 00005556fdc76820 R14: 0000000000000001 R15: 00005556fdcb1c60
[ 3075.348320] Mem-Info:
[ 3075.348626] active_anon:36 inactive_anon:7710 isolated_anon:0
[ 3075.348626]  active_file:993 inactive_file:1126 isolated_file:16
[ 3075.348626]  unevictable:0 dirty:4 writeback:13
[ 3075.348626]  slab_reclaimable:7931 slab_unreclaimable:58453
[ 3075.348626]  mapped:10601 shmem:75 pagetables:324 bounce:0
[ 3075.348626]  free:3428 free_pcp:29 free_cma:0
[ 3075.351887] Node 0 active_anon:144kB inactive_anon:30840kB active_file:3972kB inactive_file:4316kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:42320kB dirty:16kB writeback:52kB shmem:300kB writeback_tmp:0kB kernel_stack:2816kB all_unreclaimable? no
[ 3075.354324] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:128kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3075.357076] lowmem_reserve[]: 0 1616 1616 1616
[ 3075.357593] Node 0 DMA32 free:7732kB min:17404kB low:19056kB high:20708kB reserved_highatomic:0KB active_anon:144kB inactive_anon:30504kB active_file:4100kB inactive_file:4524kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:1296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3075.360560] lowmem_reserve[]: 0 0 0 0
[ 3075.360975] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6484kB
[ 3075.362753] Node 0 DMA32: 1072*4kB (UME) 345*8kB (UME) 75*16kB (UME) 9*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8600kB
[ 3075.364278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3075.365197] 1984 total pagecache pages
[ 3075.365619] 0 pages in swap cache
[ 3075.365981] Swap cache stats: add 0, delete 0, find 0/0
[ 3075.366549] Free swap  = 0kB
[ 3075.366865] Total swap = 0kB
[ 3075.367182] 524158 pages RAM
[ 3075.367518] 0 pages HighMem/MovableOnly
[ 3075.367927] 105057 pages reserved
[ 3075.368339] Unreclaimable slab info:
[ 3075.369016] Name                      Used          Total
[ 3075.369643] pid_3                      7KB          7KB
[ 3075.370204] pid_2                     67KB         78KB
[ 3075.370780] IEEE-802.15.4-MAC         63KB         63KB
[ 3075.371337] IEEE-802.15.4-RAW         63KB         63KB
[ 3075.371908] p9_req_t                   8KB          8KB
[ 3075.372498] fib6_nodes                28KB         28KB
[ 3075.373051] ip6_dst_cache             45KB         45KB
[ 3075.373630] PINGv6                    63KB         63KB
[ 3075.374187] RAWv6                    346KB        346KB
[ 3075.374754] UDPLITEv6                 62KB         62KB
[ 3075.375304] UDPv6                     93KB         93KB
[ 3075.375871] tw_sock_TCPv6             15KB         15KB
[ 3075.376428] request_sock_TCPv6         15KB         15KB
[ 3075.377004] TCPv6                     62KB         62KB
[ 3075.377577] scsi_sense_cache           8KB          8KB
[ 3075.378132] sd_ext_cdb                 3KB          3KB
[ 3075.378704] virtio_scsi_cmd           16KB         16KB
[ 3075.379265] sgpool-128               119KB        119KB
[ 3075.379843] sgpool-64                 63KB         63KB
[ 3075.380420] sgpool-32                204KB        204KB
[ 3075.380985] sgpool-16                 97KB         97KB
[ 3075.381555] sgpool-8                  45KB         45KB
[ 3075.382103] io_kiocb                  70KB         82KB
[ 3075.382670] mqueue_inode_cache         62KB         62KB
[ 3075.383235] nfs_commit_data           15KB         15KB
[ 3075.383808] nfs_write_data            47KB         47KB
[ 3075.384369] jbd2_inode                 7KB          7KB
[ 3075.384956] ext4_system_zone           7KB          7KB
[ 3075.385525] ext4_io_end_vec            7KB          7KB
[ 3075.386079] ext4_bio_post_read_ctx         15KB         15KB
[ 3075.386697] kioctx                    31KB         31KB
[ 3075.387254] aio_kiocb                  7KB          7KB
[ 3075.387840] bio-2                      4KB          4KB
[ 3075.388406] fasync_cache               7KB          7KB
[ 3075.388980] pid_namespace              7KB          7KB
[ 3075.389553] posix_timers_cache         15KB         15KB
[ 3075.390131] rpc_buffers               31KB         31KB
[ 3075.390703] rpc_tasks                  3KB          3KB
[ 3075.391256] UNIX                     374KB        416KB
[ 3075.391836] UDP-Lite                  63KB         63KB
[ 3075.392405] tcp_bind_bucket            8KB          8KB
[ 3075.392976] inet_peer_cache            4KB          4KB
[ 3075.393555] xfrm_state                32KB         32KB
[ 3075.394104] ip_fib_trie                8KB          8KB
[ 3075.394675] ip_fib_alias              19KB         19KB
[ 3075.395226] ip_dst_cache              49KB         60KB
[ 3075.395802] PING                      31KB         31KB
[ 3075.396363] RAW                      125KB        125KB
[ 3075.396945] UDP                      323KB        378KB
[ 3075.397518] tw_sock_TCP                7KB          7KB
[ 3075.398071] request_sock_TCP           7KB          7KB
[ 3075.398637] TCP                       60KB         60KB
[ 3075.399188] hugetlbfs_inode_cache         30KB         30KB
[ 3075.399805] bio-1                     11KB         11KB
[ 3075.400366] eventpoll_pwq             23KB         23KB
[ 3075.400944] eventpoll_epi             55KB         55KB
[ 3075.401508] inotify_inode_mark         78KB         78KB
[ 3075.402065] request_queue             60KB         60KB
[ 3075.402631] blkdev_ioc                48KB         48KB
[ 3075.403189] bio-0                    264KB        264KB
[ 3075.403762] biovec-max              1134KB       1134KB
[ 3075.404330] biovec-64                267KB        267KB
[ 3075.404906] biovec-16                 37KB         37KB
[ 3075.405471] user_namespace            31KB         31KB
[ 3075.406026] uid_cache                  8KB          8KB
[ 3075.406600] dmaengine-unmap-2          4KB          4KB
[ 3075.407155] audit_buffer               7KB          7KB
[ 3075.407737] skbuff_fclone_cache         75KB         75KB
[ 3075.408311] skbuff_head_cache        270KB        270KB
[ 3075.408887] file_lock_cache           74KB         74KB
[ 3075.409438] file_lock_ctx              7KB          7KB
[ 3075.410015] fsnotify_mark_connector         40KB         40KB
[ 3075.410644] net_namespace            143KB        143KB
[ 3075.411200] task_delay_info          108KB        108KB
[ 3075.411774] taskstats                 77KB         77KB
[ 3075.412350] proc_dir_entry           361KB        386KB
[ 3075.412921] pde_opener                35KB         35KB
[ 3075.413492] seq_file                  90KB         90KB
[ 3075.414044] sigqueue                 102KB        102KB
[ 3075.414620] shmem_inode_cache       1286KB       1383KB
[ 3075.415170] kernfs_iattrs_cache        243KB        243KB
[ 3075.415763] kernfs_node_cache       5449KB       5449KB
[ 3075.416321] mnt_cache                252KB        252KB
[ 3075.416922] filp                    1013KB       1650KB
[ 3075.417501] names_cache             5801KB       6455KB
[ 3075.418048] hashtab_node             278KB        278KB
[ 3075.418629] ebitmap_node            1149KB       1149KB
[ 3075.419181] avtab_node              4976KB       4976KB
[ 3075.419765] avc_node                  35KB         35KB
[ 3075.420356] lsm_inode_cache         2762KB       3115KB
[ 3075.420940] lsm_file_cache           108KB        200KB
[ 3075.421508] key_jar                   94KB        118KB
[ 3075.422060] uts_namespace             15KB         15KB
[ 3075.422633] nsproxy                   11KB         11KB
[ 3075.423207] vm_area_struct          1143KB       1320KB
[ 3075.423780] fs_cache                  56KB         80KB
[ 3075.424360] files_cache              196KB        334KB
[ 3075.424942] signal_cache             375KB        617KB
[ 3075.425521] sighand_cache            247KB        360KB
[ 3075.426088] task_struct             1141KB       1758KB
[ 3075.426668] cred_jar                 124KB        196KB
[ 3075.427242] anon_vma_chain           251KB        362KB
[ 3075.427823] anon_vma                 187KB        227KB
[ 3075.428388] pid                       68KB         71KB
[ 3075.428962] Acpi-Operand              60KB         91KB
[ 3075.429531] Acpi-ParseExt             23KB         23KB
[ 3075.430088] Acpi-Parse                75KB         90KB
[ 3075.430656] Acpi-State                90KB        106KB
[ 3075.431212] Acpi-Namespace            24KB         24KB
[ 3075.431784] shared_policy_node          8KB          8KB
[ 3075.432359] numa_policy                7KB          7KB
[ 3075.432949] trace_event_file         163KB        163KB
[ 3075.433516] ftrace_event_field        280KB        280KB
[ 3075.434080] pool_workqueue            48KB         48KB
[ 3075.434655] task_group                16KB         16KB
[ 3075.435210] mm_struct                245KB        567KB
[ 3075.435791] vmap_area                142KB        196KB
[ 3075.436359] page->ptl                250KB        322KB
[ 3075.436933] kmemleak_scan_area        156KB        207KB
[ 3075.438581] kmemleak_object       133679KB     150037KB
[ 3075.439151] kmalloc-8k              4736KB       4896KB
[ 3075.439733] kmalloc-4k              7360KB       8064KB
[ 3075.440315] kmalloc-2k              4528KB       5152KB
[ 3075.440908] kmalloc-1k              2500KB       3264KB
[ 3075.441504] kmalloc-512             2224KB       3808KB
[ 3075.442063] kmalloc-256             1231KB       1416KB
[ 3075.442644] kmalloc-192              568KB        568KB
[ 3075.443222] kmalloc-128              495KB        588KB
[ 3075.443815] kmalloc-96               291KB        540KB
[ 3075.444404] kmalloc-64               822KB       1284KB
[ 3075.445002] kmalloc-32               738KB        868KB
[ 3075.445578] kmalloc-16               336KB        380KB
[ 3075.446137] kmalloc-8                299KB        334KB
[ 3075.446703] kmem_cache_node           47KB         47KB
[ 3075.447258] kmem_cache                75KB         75KB
[ 3075.447831] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=16987,uid=0
[ 3075.450458] Out of memory (oom_kill_allocating_task): Killed process 16987 (systemd-udevd) total-vm:35624kB, anon-rss:10188kB, file-rss:440kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0
[ 3075.806159] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250
[ 3075.807404] CPU: 1 PID: 103 Comm: systemd-journal Not tainted 5.10.194 #1
[ 3075.808098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3075.808986] Call Trace:
[ 3075.809280]  dump_stack+0x107/0x167
[ 3075.809675]  dump_header+0x106/0x65e
[ 3075.810082]  oom_kill_process.cold+0x10/0x15
[ 3075.810557]  out_of_memory+0x1149/0x1440
[ 3075.810995]  ? oom_killer_disable+0x280/0x280
[ 3075.811474]  ? mutex_trylock+0x237/0x2b0
[ 3075.811910]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 3075.812553]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 3075.813187]  ? lock_acquire+0x117/0x470
[ 3075.813621]  ? warn_alloc+0x190/0x190
[ 3075.814045]  __alloc_pages_nodemask+0x51d/0x600
[ 3075.814552]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3075.815204]  ? find_get_entry+0x2c8/0x740
[ 3075.815657]  alloc_pages_current+0x187/0x280
[ 3075.816148]  __page_cache_alloc+0x2d2/0x360
[ 3075.816627]  pagecache_get_page+0x2c7/0xc80
[ 3075.817108]  filemap_fault+0x177d/0x2210
[ 3075.817556]  ? read_cache_page_gfp+0x30/0x30
[ 3075.818039]  ? handle_mm_fault+0x28b1/0x3500
[ 3075.818515]  ? lock_downgrade+0x6d0/0x6d0
[ 3075.818970]  ext4_filemap_fault+0x87/0xc0
[ 3075.819417]  __do_fault+0x113/0x410
[ 3075.819821]  handle_mm_fault+0x1e53/0x3500
[ 3075.820277]  ? find_held_lock+0x2c/0x110
[ 3075.820724]  ? __pmd_alloc+0x5e0/0x5e0
[ 3075.821151]  ? vmacache_find+0x55/0x2a0
[ 3075.821597]  do_user_addr_fault+0x56e/0xc60
[ 3075.822069]  exc_page_fault+0xa2/0x1a0
[ 3075.822490]  ? asm_exc_page_fault+0x8/0x30
[ 3075.822950]  asm_exc_page_fault+0x1e/0x30
[ 3075.823394] RIP: 0033:0x7ffa6d57f470
[ 3075.823808] Code: 83 ec 08 48 89 d1 41 b8 10 00 00 00 48 8d 44 24 10 31 d2 4d 89 f9 41 89 f6 50 e8 5b fe ff ff 5a 59 85 c0 78 a9 4c 8b 64 24 10 <4d> 8b 44 24 08 4d 85 c0 0f 84 32 01 00 00 49 83 f8 0f 0f 86 a0 01
[ 3075.825817] RSP: 002b:00007ffc182bdc20 EFLAGS: 00010202
[ 3075.826395] RAX: 0000000000000001 RBX: 00000000000b6918 RCX: 00007ffa6d57f344
[ 3075.827171] RDX: 00007ffc182bdc28 RSI: 00007ffc182bdc28 RDI: 0000562c0cc493f0
[ 3075.827937] RBP: 00007ffc182bdca8 R08: 0000000000000001 R09: 00000000000b6918
[ 3075.828705] R10: 0000000000000002 R11: 00000000005782d0 R12: 00007ffa6be9a918
[ 3075.829464] R13: 0000562c0cc482d0 R14: 0000000000000006 R15: 00007ffc182bdc30
[ 3075.830305] Mem-Info:
[ 3075.830616] active_anon:36 inactive_anon:7620 isolated_anon:0
[ 3075.830616]  active_file:30 inactive_file:29 isolated_file:0
[ 3075.830616]  unevictable:0 dirty:0 writeback:0
[ 3075.830616]  slab_reclaimable:7879 slab_unreclaimable:58548
[ 3075.830616]  mapped:8712 shmem:75 pagetables:326 bounce:0
[ 3075.830616]  free:2820 free_pcp:49 free_cma:0
[ 3075.833892] Node 0 active_anon:144kB inactive_anon:30480kB active_file:120kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34848kB dirty:0kB writeback:0kB shmem:300kB writeback_tmp:0kB kernel_stack:2816kB all_unreclaimable? no
[ 3075.836144] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3075.838731] lowmem_reserve[]: 0 1616 1616 1616
[ 3075.839204] Node 0 DMA32 free:4796kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:144kB inactive_anon:30768kB active_file:240kB inactive_file:28kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:1304kB bounce:0kB free_pcp:220kB local_pcp:80kB free_cma:0kB
[ 3075.841978] lowmem_reserve[]: 0 0 0 0
[ 3075.842374] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6484kB
[ 3075.844056] Node 0 DMA32: 677*4kB (UME) 265*8kB (UME) 39*16kB (UM) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5548kB
[ 3075.845509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3075.846392] 148 total pagecache pages
[ 3075.847497] 0 pages in swap cache
[ 3075.847860] Swap cache stats: add 0, delete 0, find 0/0
[ 3075.848415] Free swap  = 0kB
[ 3075.848748] Total swap = 0kB
[ 3075.849062] 524158 pages RAM
[ 3075.849376] 0 pages HighMem/MovableOnly
[ 3075.849806] 105057 pages reserved
[ 3075.850194] Unreclaimable slab info:
[ 3075.850813] Name                      Used          Total
[ 3075.851407] pid_3                      7KB          7KB
[ 3075.851977] pid_2                     67KB         78KB
[ 3075.852567] IEEE-802.15.4-MAC         63KB         63KB
[ 3075.853117] IEEE-802.15.4-RAW         63KB         63KB
[ 3075.853687] p9_req_t                   8KB          8KB
[ 3075.854236] fib6_nodes                28KB         28KB
[ 3075.854801] ip6_dst_cache             45KB         45KB
[ 3075.855353] PINGv6                    63KB         63KB
[ 3075.855921] RAWv6                    346KB        346KB
[ 3075.856488] UDPLITEv6                 62KB         62KB
[ 3075.857037] UDPv6                     93KB         93KB
[ 3075.857430] oom_reaper: reaped process 16972 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[ 3075.857608] tw_sock_TCPv6             15KB         15KB
[ 3075.857676] request_sock_TCPv6         15KB         15KB
[ 3075.857683] TCPv6                     62KB         62KB
[ 3075.857693] scsi_sense_cache           8KB          8KB
[ 3075.857699] sd_ext_cdb                 3KB          3KB
[ 3075.857706] virtio_scsi_cmd           16KB         16KB
[ 3075.857717] sgpool-128               119KB        119KB
[ 3075.857724] sgpool-64                 63KB         63KB
[ 3075.864582] sgpool-32                362KB        362KB
[ 3075.865136] sgpool-16                 97KB         97KB
[ 3075.865702] sgpool-8                  60KB         60KB
[ 3075.866250] io_kiocb                  70KB         82KB
[ 3075.866818] mqueue_inode_cache         62KB         62KB
[ 3075.867374] nfs_commit_data           15KB         15KB
[ 3075.867933] nfs_write_data            47KB         47KB
[ 3075.868498] jbd2_inode                 7KB          7KB
[ 3075.869048] ext4_system_zone           7KB          7KB
[ 3075.869622] ext4_io_end_vec            7KB          7KB
[ 3075.870170] ext4_bio_post_read_ctx         15KB         15KB
[ 3075.870772] kioctx                    31KB         31KB
[ 3075.871320] aio_kiocb                  7KB          7KB
[ 3075.871883] bio-2                      4KB          4KB
[ 3075.872447] fasync_cache               7KB          7KB
[ 3075.873016] pid_namespace              7KB          7KB
[ 3075.873583] posix_timers_cache         15KB         15KB
[ 3075.874141] rpc_buffers               31KB         31KB
[ 3075.874710] rpc_tasks                  3KB          3KB
[ 3075.875257] UNIX                     374KB        416KB
[ 3075.875831] UDP-Lite                  63KB         63KB
[ 3075.876377] tcp_bind_bucket            8KB          8KB
[ 3075.876945] inet_peer_cache            4KB          4KB
[ 3075.877511] xfrm_state                32KB         32KB
[ 3075.878054] ip_fib_trie                8KB          8KB
[ 3075.878620] ip_fib_alias              19KB         19KB
[ 3075.879169] ip_dst_cache              49KB         60KB
[ 3075.879729] PING                      31KB         31KB
[ 3075.880288] RAW                      125KB        125KB
[ 3075.880865] UDP                      323KB        378KB
[ 3075.881411] tw_sock_TCP                7KB          7KB
[ 3075.881979] request_sock_TCP           7KB          7KB
[ 3075.882543] TCP                       60KB         60KB
[ 3075.883091] hugetlbfs_inode_cache         30KB         30KB
[ 3075.883691] bio-1                     11KB         11KB
[ 3075.884233] eventpoll_pwq             23KB         23KB
[ 3075.884804] eventpoll_epi             55KB         55KB
[ 3075.885355] inotify_inode_mark         78KB         78KB
[ 3075.885926] request_queue             60KB         60KB
[ 3075.886494] blkdev_ioc                48KB         48KB
[ 3075.887043] bio-0                    320KB        320KB
[ 3075.887603] biovec-max              1164KB       1164KB
[ 3075.888147] biovec-64                456KB        456KB
[ 3075.888721] biovec-16                 56KB         56KB
[ 3075.889271] user_namespace            31KB         31KB
[ 3075.889835] uid_cache                  8KB          8KB
[ 3075.890389] dmaengine-unmap-2          4KB          4KB
[ 3075.890952] audit_buffer               7KB          7KB
[ 3075.891518] skbuff_fclone_cache         75KB         75KB
[ 3075.892080] skbuff_head_cache        273KB        273KB
[ 3075.892682] file_lock_cache           74KB         74KB
[ 3075.893226] file_lock_ctx              7KB          7KB
[ 3075.893792] fsnotify_mark_connector         40KB         40KB
[ 3075.894383] net_namespace            143KB        143KB
[ 3075.894953] task_delay_info          108KB        108KB
[ 3075.895514] taskstats                 77KB         77KB
[ 3075.896061] proc_dir_entry           361KB        386KB
[ 3075.896629] pde_opener                35KB         35KB
[ 3075.897176] seq_file                  90KB         90KB
[ 3075.897742] sigqueue                 102KB        102KB
[ 3075.898290] shmem_inode_cache       1286KB       1383KB
[ 3075.898858] kernfs_iattrs_cache        243KB        243KB
[ 3075.899420] kernfs_node_cache       5449KB       5449KB
[ 3075.899985] mnt_cache                252KB        252KB
[ 3075.900576] filp                     993KB       1612KB
[ 3075.901137] names_cache             4989KB       6455KB
[ 3075.901698] hashtab_node             278KB        278KB
[ 3075.902241] ebitmap_node            1149KB       1149KB
[ 3075.902809] avtab_node              4976KB       4976KB
[ 3075.903354] avc_node                  35KB         35KB
[ 3075.903931] lsm_inode_cache         2740KB       3111KB
[ 3075.904503] lsm_file_cache           108KB        200KB
[ 3075.905055] key_jar                   94KB        118KB
[ 3075.905619] uts_namespace             15KB         15KB
[ 3075.906168] nsproxy                   11KB         11KB
[ 3075.906740] vm_area_struct          1145KB       1320KB
[ 3075.907288] fs_cache                  56KB         80KB
[ 3075.907852] files_cache              196KB        334KB
[ 3075.908417] signal_cache             375KB        617KB
[ 3075.908984] sighand_cache            247KB        360KB
[ 3075.909558] task_struct             1141KB       1758KB
[ 3075.910102] cred_jar                 124KB        196KB
[ 3075.910672] anon_vma_chain           253KB        362KB
[ 3075.911216] anon_vma                 186KB        223KB
[ 3075.911780] pid                       68KB         71KB
[ 3075.912335] Acpi-Operand              60KB         91KB
[ 3075.912901] Acpi-ParseExt             23KB         23KB
[ 3075.913445] Acpi-Parse                75KB         90KB
[ 3075.914012] Acpi-State                90KB        106KB
[ 3075.914575] Acpi-Namespace            24KB         24KB
[ 3075.915123] shared_policy_node          8KB          8KB
[ 3075.915696] numa_policy                7KB          7KB
[ 3075.916242] trace_event_file         163KB        163KB
[ 3075.916823] ftrace_event_field        280KB        280KB
[ 3075.917381] pool_workqueue            48KB         48KB
[ 3075.917946] task_group                16KB         16KB
[ 3075.918517] mm_struct                245KB        567KB
[ 3075.919070] vmap_area                142KB        196KB
[ 3075.919631] page->ptl                250KB        322KB
[ 3075.920183] kmemleak_scan_area        156KB        207KB
[ 3075.921302] kmemleak_object       133560KB     150029KB
[ 3075.921872] kmalloc-8k              4736KB       4896KB
[ 3075.922420] kmalloc-4k              7240KB       7968KB
[ 3075.922984] kmalloc-2k              4524KB       5152KB
[ 3075.923566] kmalloc-1k              2500KB       3264KB
[ 3075.924123] kmalloc-512             2224KB       3808KB
[ 3075.924703] kmalloc-256             1231KB       1416KB
[ 3075.925252] kmalloc-192              572KB        572KB
[ 3075.925823] kmalloc-128              494KB        588KB
[ 3075.926373] kmalloc-96               293KB        540KB
[ 3075.926957] kmalloc-64               822KB       1284KB
[ 3075.927523] kmalloc-32               737KB        868KB
[ 3075.928074] kmalloc-16               336KB        380KB
[ 3075.928642] kmalloc-8                299KB        334KB
[ 3075.929186] kmem_cache_node           47KB         47KB
[ 3075.929746] kmem_cache                75KB         75KB
[ 3075.930297] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0
[ 3075.932387] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:31836kB, anon-rss:976kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:92kB oom_score_adj:-250
[ 3076.013214] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 3076.014237] CPU: 1 PID: 178 Comm: in:imklog Not tainted 5.10.194 #1
[ 3076.014882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3076.015739] Call Trace:
[ 3076.016016]  dump_stack+0x107/0x167
[ 3076.016406]  dump_header+0x106/0x65e
[ 3076.016798]  oom_kill_process.cold+0x10/0x15
[ 3076.017263]  out_of_memory+0x1149/0x1440
[ 3076.017696]  ? oom_killer_disable+0x280/0x280
[ 3076.018163]  ? mutex_trylock+0x237/0x2b0
[ 3076.018587]  ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130
[ 3076.019202]  __alloc_pages_slowpath.constprop.0+0x1b25/0x2130
[ 3076.019818]  ? lock_acquire+0x117/0x470
[ 3076.020232]  ? warn_alloc+0x190/0x190
[ 3076.020646]  __alloc_pages_nodemask+0x51d/0x600
[ 3076.021130]  ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130
[ 3076.021759]  ? find_get_entry+0x2c8/0x740
[ 3076.022197]  alloc_pages_current+0x187/0x280
[ 3076.022654]  __page_cache_alloc+0x2d2/0x360
[ 3076.023103]  pagecache_get_page+0x2c7/0xc80
[ 3076.023557]  filemap_fault+0x177d/0x2210
[ 3076.023991]  ? read_cache_page_gfp+0x30/0x30
[ 3076.024476]  ? replace_page_cache_page+0x1200/0x1200
[ 3076.025012]  ? count_memcg_event_mm.part.0+0x10f/0x2f0
[ 3076.025571]  ext4_filemap_fault+0x87/0xc0
[ 3076.026006]  __do_fault+0x113/0x410
[ 3076.026394]  handle_mm_fault+0x1e53/0x3500
[ 3076.026849]  ? fsnotify+0xf50/0xf50
[ 3076.027241]  ? __pmd_alloc+0x5e0/0x5e0
[ 3076.027659]  ? vmacache_find+0x55/0x2a0
[ 3076.028078]  ? vmacache_update+0xce/0x140
[ 3076.028520]  do_user_addr_fault+0x56e/0xc60
[ 3076.028987]  exc_page_fault+0xa2/0x1a0
[ 3076.029399]  ? asm_exc_page_fault+0x8/0x30
[ 3076.029846]  asm_exc_page_fault+0x1e/0x30
[ 3076.030283] RIP: 0033:0x7fd58134508c
[ 3076.030674] Code: Unable to access opcode bytes at RIP 0x7fd581345062.
[ 3076.031367] RSP: 002b:00007fd5808e14d0 EFLAGS: 00010246
[ 3076.031925] RAX: 0000000000000b9a RBX: 0000000000000000 RCX: 00007fd58134508c
[ 3076.032696] RDX: 0000000000001fa0 RSI: 00007fd5808e1d00 RDI: 0000000000000005
[ 3076.033449] RBP: 000055d4e2be14c0 R08: 0000000000000000 R09: 000055d4e2bdde88
[ 3076.034198] R10: 00007fd57c02a6f0 R11: 0000000000000246 R12: 00007fd5808e1d00
[ 3076.034940] R13: 0000000000001fa0 R14: 00007fd5808e1d00 R15: 00007fd5808e273e
[ 3076.035766] Mem-Info:
[ 3076.036042] active_anon:36 inactive_anon:7494 isolated_anon:0
[ 3076.036042]  active_file:13 inactive_file:1 isolated_file:0
[ 3076.036042]  unevictable:0 dirty:0 writeback:0
[ 3076.036042]  slab_reclaimable:7879 slab_unreclaimable:58548
[ 3076.036042]  mapped:8712 shmem:75 pagetables:326 bounce:0
[ 3076.036042]  free:2417 free_pcp:175 free_cma:0
[ 3076.039258] Node 0 active_anon:144kB inactive_anon:29976kB active_file:52kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34848kB dirty:0kB writeback:0kB shmem:300kB writeback_tmp:0kB kernel_stack:2784kB all_unreclaimable? no
[ 3076.041794] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:132kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3076.044521] lowmem_reserve[]: 0 1616 1616 1616
[ 3076.045021] Node 0 DMA32 free:2680kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:144kB inactive_anon:30264kB active_file:240kB inactive_file:28kB unevictable:0kB writepending:0kB present:2080640kB managed:1660496kB mlocked:0kB pagetables:1304kB bounce:0kB free_pcp:700kB local_pcp:92kB free_cma:0kB
[ 3076.048004] lowmem_reserve[]: 0 0 0 0
[ 3076.048441] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 2*128kB (UE) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6484kB
[ 3076.050147] Node 0 DMA32: 424*4kB (UME) 159*8kB (UME) 12*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3160kB
[ 3076.051541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3076.052429] 127 total pagecache pages
[ 3076.052839] 0 pages in swap cache
[ 3076.053204] Swap cache stats: add 0, delete 0, find 0/0
[ 3076.053767] Free swap  = 0kB
[ 3076.054085] Total swap = 0kB
[ 3076.054410] 524158 pages RAM
[ 3076.054745] 0 pages HighMem/MovableOnly
[ 3076.055162] 105057 pages reserved
[ 3076.055535] Unreclaimable slab info:
[ 3076.055918] Name                      Used          Total
[ 3076.056513] pid_3                      7KB          7KB
[ 3076.057067] pid_2                     67KB         78KB
[ 3076.057642] IEEE-802.15.4-MAC         63KB         63KB
[ 3076.058193] IEEE-802.15.4-RAW         63KB         63KB
[ 3076.058764] p9_req_t                   8KB          8KB
[ 3076.059321] fib6_nodes                28KB         28KB
[ 3076.059897] ip6_dst_cache             45KB         45KB
[ 3076.060479] PINGv6                    63KB         63KB
[ 3076.061034] RAWv6                    346KB        346KB
[ 3076.061609] UDPLITEv6                 62KB         62KB
[ 3076.062160] UDPv6                     93KB         93KB
[ 3076.062734] tw_sock_TCPv6             15KB         15KB
[ 3076.063286] request_sock_TCPv6         15KB         15KB
[ 3076.063866] TCPv6                     62KB         62KB
[ 3076.064423] scsi_sense_cache           8KB          8KB
[ 3076.064994] sd_ext_cdb                 3KB          3KB
[ 3076.065571] virtio_scsi_cmd           16KB         16KB
[ 3076.066131] sgpool-128               119KB        119KB
[ 3076.066703] sgpool-64                 63KB         63KB
[ 3076.067259] sgpool-32                362KB        362KB
[ 3076.067833] sgpool-16                 97KB         97KB
[ 3076.068391] sgpool-8                  60KB         60KB
[ 3076.068961] io_kiocb                  70KB         82KB
[ 3076.069532] mqueue_inode_cache         62KB         62KB
[ 3076.070094] nfs_commit_data           15KB         15KB
[ 3076.070674] nfs_write_data            47KB         47KB
[ 3076.071226] jbd2_inode                 7KB          7KB
[ 3076.071791] ext4_system_zone           7KB          7KB
[ 3076.072361] ext4_io_end_vec            7KB          7KB
[ 3076.072935] ext4_bio_post_read_ctx         15KB         15KB
[ 3076.073554] kioctx                    31KB         31KB
[ 3076.074103] aio_kiocb                  7KB          7KB
[ 3076.074673] bio-2                      4KB          4KB
[ 3076.075228] fasync_cache               7KB          7KB
[ 3076.075789] pid_namespace              7KB          7KB
[ 3076.076342] posix_timers_cache         15KB         15KB
[ 3076.076920] rpc_buffers               31KB         31KB
[ 3076.077498] rpc_tasks                  3KB          3KB
[ 3076.078054] UNIX                     374KB        416KB
[ 3076.078623] UDP-Lite                  63KB         63KB
[ 3076.079178] tcp_bind_bucket            8KB          8KB
[ 3076.079754] inet_peer_cache            4KB          4KB
[ 3076.080300] xfrm_state                32KB         32KB
[ 3076.080896] ip_fib_trie                8KB          8KB
[ 3076.081446] ip_fib_alias              19KB         19KB
[ 3076.082018] ip_dst_cache              49KB         60KB
[ 3076.082585] PING                      31KB         31KB
[ 3076.083132] RAW                      125KB        125KB
[ 3076.083704] UDP                      323KB        378KB
[ 3076.084250] tw_sock_TCP                7KB          7KB
[ 3076.084837] request_sock_TCP           7KB          7KB
[ 3076.085390] TCP                       60KB         60KB
[ 3076.085959] hugetlbfs_inode_cache         30KB         30KB
[ 3076.086566] bio-1                     11KB         11KB
[ 3076.087114] eventpoll_pwq             23KB         23KB
[ 3076.087678] eventpoll_epi             55KB         55KB
[ 3076.088231] inotify_inode_mark         78KB         78KB
[ 3076.088813] request_queue             60KB         60KB
[ 3076.089365] blkdev_ioc                48KB         48KB
[ 3076.089938] bio-0                    320KB        320KB
[ 3076.090505] biovec-max              1164KB       1164KB
[ 3076.091054] biovec-64                456KB        456KB
[ 3076.091621] biovec-16                 56KB         56KB
[ 3076.092176] user_namespace            31KB         31KB
[ 3076.092756] uid_cache                  8KB          8KB
[ 3076.093318] dmaengine-unmap-2          4KB          4KB
[ 3076.093894] audit_buffer               7KB          7KB
[ 3076.094445] skbuff_fclone_cache         75KB         75KB
[ 3076.095033] skbuff_head_cache        273KB        273KB
[ 3076.095604] file_lock_cache           74KB         74KB
[ 3076.096163] file_lock_ctx              7KB          7KB
[ 3076.096734] fsnotify_mark_connector         40KB         40KB
[ 3076.097342] net_namespace            143KB        143KB
[ 3076.097917] task_delay_info          108KB        108KB
[ 3076.098484] taskstats                 77KB         77KB
[ 3076.099032] proc_dir_entry           361KB        386KB
[ 3076.099599] pde_opener                35KB         35KB
[ 3076.100154] seq_file                  90KB         90KB
[ 3076.100741] sigqueue                 102KB        102KB
[ 3076.101291] shmem_inode_cache       1286KB       1383KB
[ 3076.101863] kernfs_iattrs_cache        243KB        243KB
[ 3076.102433] kernfs_node_cache       5449KB       5449KB
[ 3076.103007] mnt_cache                252KB        252KB
[ 3076.103582] filp                     993KB       1612KB
[ 3076.104136] names_cache             4989KB       6455KB
[ 3076.104720] hashtab_node             278KB        278KB
[ 3076.105273] ebitmap_node            1149KB       1149KB
[ 3076.105863] avtab_node              4976KB       4976KB
[ 3076.106414] avc_node                  35KB         35KB
[ 3076.106987] lsm_inode_cache         2740KB       3111KB
[ 3076.107553] lsm_file_cache           108KB        200KB
[ 3076.108109] key_jar                   94KB        118KB
[ 3076.108690] uts_namespace             15KB         15KB
[ 3076.109243] nsproxy                   11KB         11KB
[ 3076.109819] vm_area_struct          1145KB       1320KB
[ 3076.110373] fs_cache                  56KB         80KB
[ 3076.110947] files_cache              196KB        334KB
[ 3076.111514] signal_cache             375KB        617KB
[ 3076.112071] sighand_cache            247KB        360KB
[ 3076.112657] task_struct             1141KB       1758KB
[ 3076.113207] cred_jar                 124KB        196KB
[ 3076.113776] anon_vma_chain           253KB        362KB
[ 3076.114329] anon_vma                 180KB        211KB
[ 3076.114902] pid                       68KB         71KB
[ 3076.115469] Acpi-Operand              60KB         91KB
[ 3076.116027] Acpi-ParseExt             23KB         23KB
[ 3076.116604] Acpi-Parse                75KB         90KB
[ 3076.117158] Acpi-State                90KB        106KB
[ 3076.117723] Acpi-Namespace            24KB         24KB
[ 3076.118273] shared_policy_node          8KB          8KB
[ 3076.118848] numa_policy                7KB          7KB
[ 3076.119401] trace_event_file         163KB        163KB
[ 3076.119970] ftrace_event_field        280KB        280KB
[ 3076.120567] pool_workqueue            48KB         48KB
[ 3076.121127] task_group                16KB         16KB
[ 3076.121694] mm_struct                245KB        567KB
[ 3076.122248] vmap_area                142KB        196KB
[ 3076.122818] page->ptl                250KB        322KB
[ 3076.123373] kmemleak_scan_area        156KB        207KB
[ 3076.124058] kmemleak_object       133569KB     150029KB
[ 3076.124641] kmalloc-8k              4736KB       4896KB
[ 3076.125196] kmalloc-4k              7256KB       7968KB
[ 3076.125760] kmalloc-2k              4524KB       5152KB
[ 3076.126319] kmalloc-1k              2500KB       3264KB
[ 3076.126894] kmalloc-512             2234KB       3808KB
[ 3076.127442] kmalloc-256             1231KB       1416KB
[ 3076.128017] kmalloc-192              572KB        572KB
[ 3076.128601] kmalloc-128              494KB        588KB
[ 3076.129156] kmalloc-96               293KB        540KB
[ 3076.129736] kmalloc-64               822KB       1284KB
[ 3076.130295] kmalloc-32               737KB        868KB
[ 3076.130876] kmalloc-16               336KB        380KB
[ 3076.131431] kmalloc-8                299KB        334KB
[ 3076.132003] kmem_cache_node           47KB         47KB
[ 3076.132582] kmem_cache                75KB         75KB
[ 3076.133130] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0
[ 3076.134775] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:1100kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 3076.301781] systemd[1]: systemd-udevd.service: A process of this unit has been killed by the OOM killer.
[ 3076.314871] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL
[ 3076.316775] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'.
[ 3076.329941] systemd[1]: systemd-journald.service: Consumed 11.907s CPU time.
[ 3076.334877] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL
[ 3076.336677] systemd[1]: rsyslog.service: Failed with result 'oom-kill'.
[ 3076.343223] systemd[1]: rsyslog.service: Consumed 1.342s CPU time.
[ 3076.359384] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
[ 3076.424814] systemd[1]: Stopping Flush Journal to Persistent Storage...
[ 3076.455592] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1.
[ 3076.456598] systemd[1]: Stopped System Logging Service.
[ 3076.457447] systemd[1]: rsyslog.service: Consumed 1.342s CPU time.
[ 3076.491232] systemd[1]: Starting System Logging Service...
[ 3076.512036] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'.
[ 3076.551431] systemd[1]: systemd-udevd.service: Consumed 1min 33.710s CPU time.
[ 3076.566684] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1.
[ 3076.570611] systemd[1]: Stopped Rule-based Manager for Device Events and Files.
[ 3076.574075] systemd[1]: systemd-udevd.service: Consumed 1min 33.710s CPU time.
[ 3076.656432] systemd[1]: Starting Rule-based Manager for Device Events and Files...
[ 3076.660412] systemd[1]: Started OpenBSD Secure Shell server.
[ 3076.667816] systemd[1]: systemd-journal-flush.service: Succeeded.
[ 3076.702705] systemd[1]: Stopped Flush Journal to Persistent Storage.
[ 3076.706842] systemd[1]: Stopped Journal Service.
[ 3076.708349] systemd[1]: systemd-journald.service: Consumed 11.907s CPU time.
[ 3076.754079] systemd[1]: Starting Journal Service...
[ 3076.760408] systemd[1]: Started System Logging Service.
[ 3077.037971] systemd-journald[17011]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing.
[ 3077.091777] systemd[1]: Started Rule-based Manager for Device Events and Files.
[ 3077.120759] systemd[1]: Stopped target Bluetooth.
[ 3077.672532] systemd[1]: Started Journal Service.
[ 3077.757032] systemd-journald[17011]: Received client request to flush runtime journal.

VM DIAGNOSIS:
07:56:05  Registers:
info registers vcpu 0
RAX=0000000000000008 RBX=ffff88800de98180 RCX=ffffffff81f30d64 RDX=000000000000c060
RSI=ffffffff81f30d72 RDI=0000000000000007 RBP=000000000001c060 RSP=ffff88800cfe70a8
R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001
R12=0000000000000000 R13=ffff88800de981a0 R14=ffff88800de98098 R15=ffff88800de98188
RIP=ffffffff81f30d76 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0a64410900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0a643c6750 CR3=000000000d610000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f
XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000
XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff85a0a0dc RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88806cf09a5d RSP=ffff88806cf09950
R8 =ffffffff85a0a0e1 R9 =ffff888048e67ae8 R10=0000000000032042 R11=1ffff1100d9e1332
R12=ffff88806cf09a70 R13=ffff88806cf09a28 R14=1ffff1100d9e1332 R15=ffffffff85a0a0e0
RIP=ffffffff81107582 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc9ff014700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffa6c3ef5f8 CR3=0000000048d38000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000005 XMM01=00000000ff0000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=000000000000000035316c6c696b6672
XMM04=6d560a426b203430303820202020093a XMM05=00000000000000000000000000000000
XMM06=20090a426b2034300a38202020200920 XMM07=00000000000000000000000000000000
XMM08=722f6c6c696b66722f6372732f2e2e00 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000