ile_read_iter+0x184/0x4c0 [ 1592.794773] generic_file_splice_read+0x455/0x6d0 [ 1592.795443] ? pipe_to_user+0x170/0x170 [ 1592.796063] ? _cond_resched+0x12/0x80 [ 1592.796554] ? avc_policy_seqno+0x9/0x70 [ 1592.797189] ? selinux_file_permission+0x92/0x520 [ 1592.797901] ? pipe_to_user+0x170/0x170 [ 1592.798502] do_splice_to+0x10e/0x160 [ 1592.799014] splice_direct_to_actor+0x2fe/0x980 [ 1592.799603] ? pipe_to_sendpage+0x380/0x380 [ 1592.800145] ? do_splice_to+0x160/0x160 [ 1592.800639] ? security_file_permission+0x24e/0x570 [ 1592.801289] do_splice_direct+0x1c4/0x290 [ 1592.801805] ? splice_direct_to_actor+0x980/0x980 [ 1592.802518] ? selinux_file_permission+0x92/0x520 [ 1592.803121] ? security_file_permission+0x24e/0x570 [ 1592.803764] do_sendfile+0x553/0x1090 [ 1592.804257] ? do_pwritev+0x270/0x270 [ 1592.804744] ? wait_for_completion_io+0x270/0x270 [ 1592.805352] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.805930] ? vfs_write+0x354/0xa70 [ 1592.806403] __x64_sys_sendfile64+0x1d1/0x210 [ 1592.807064] ? __ia32_sys_sendfile+0x220/0x220 [ 1592.807715] do_syscall_64+0x33/0x40 [ 1592.808292] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.808962] RIP: 0033:0x7f9343a7fb19 [ 1592.809431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.811826] RSP: 002b:00007f9340ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1592.812873] RAX: ffffffffffffffda RBX: 00007f9343b92f60 RCX: 00007f9343a7fb19 [ 1592.813738] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1592.814627] RBP: 00007f9340ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.815603] R10: 000000000020d315 R11: 0000000000000246 R12: 0000000000000002 [ 1592.816492] R13: 00007fff3814490f R14: 00007f9340ff5300 R15: 0000000000022000 [ 1592.820861] FAULT_INJECTION: forcing a failure. [ 1592.820861] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.822254] CPU: 1 PID: 9271 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1592.823106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.824137] Call Trace: [ 1592.824464] dump_stack+0x107/0x167 [ 1592.824927] should_fail.cold+0x5/0xa [ 1592.825399] ? create_object.isra.0+0x3a/0xa20 [ 1592.825973] should_failslab+0x5/0x20 [ 1592.826445] kmem_cache_alloc+0x5b/0x310 [ 1592.826950] ? io_wq_create+0x114/0xc00 [ 1592.827444] create_object.isra.0+0x3a/0xa20 [ 1592.827993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.828628] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1592.829287] io_wq_create+0x6ef/0xc00 [ 1592.829767] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1592.830398] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1592.831016] ? io_apoll_task_func+0x2d0/0x2d0 [ 1592.831573] ? __io_req_find_next+0x300/0x300 [ 1592.832129] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1592.832735] __io_uring_add_tctx_node+0x2c6/0x520 [ 1592.833333] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1592.833991] __do_sys_io_uring_enter+0x14de/0x1920 [ 1592.834603] ? lock_downgrade+0x6d0/0x6d0 [ 1592.835117] ? find_held_lock+0x2c/0x110 [ 1592.835620] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.836155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.836761] ? wait_for_completion_io+0x270/0x270 [ 1592.837357] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.837930] ? vfs_write+0x354/0xa70 [ 1592.838391] ? fput_many+0x2f/0x1a0 [ 1592.838843] ? ksys_write+0x1a9/0x260 [ 1592.839312] ? __ia32_sys_read+0xb0/0xb0 [ 1592.839824] do_syscall_64+0x33/0x40 [ 1592.840298] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.840956] RIP: 0033:0x7f824c5c0b19 [ 1592.841418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.843714] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.844658] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1592.845544] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1592.846425] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.847304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.848185] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 [ 1592.849525] FAULT_INJECTION: forcing a failure. [ 1592.849525] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.850899] CPU: 1 PID: 9270 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1592.851737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.852773] Call Trace: [ 1592.853104] dump_stack+0x107/0x167 [ 1592.853554] should_fail.cold+0x5/0xa [ 1592.854025] ? create_object.isra.0+0x3a/0xa20 [ 1592.854590] should_failslab+0x5/0x20 [ 1592.855060] kmem_cache_alloc+0x5b/0x310 [ 1592.855555] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1592.856193] create_object.isra.0+0x3a/0xa20 [ 1592.856744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.857373] __kmalloc+0x16e/0x390 [ 1592.857817] io_wq_create+0xeb/0xc00 [ 1592.858285] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1592.858916] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1592.859532] ? io_apoll_task_func+0x2d0/0x2d0 [ 1592.860077] ? __io_req_find_next+0x300/0x300 [ 1592.860635] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1592.861245] __io_uring_add_tctx_node+0x2c6/0x520 [ 1592.861841] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1592.862495] __do_sys_io_uring_enter+0x14de/0x1920 [ 1592.863102] ? lock_downgrade+0x6d0/0x6d0 [ 1592.863613] ? find_held_lock+0x2c/0x110 [ 1592.864115] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.864652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.865264] ? wait_for_completion_io+0x270/0x270 [ 1592.865863] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.866428] ? vfs_write+0x354/0xa70 [ 1592.866905] ? fput_many+0x2f/0x1a0 [ 1592.867316] ? ksys_write+0x1a9/0x260 [ 1592.867747] ? __ia32_sys_read+0xb0/0xb0 [ 1592.868218] do_syscall_64+0x33/0x40 [ 1592.868645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.869214] RIP: 0033:0x7f27221a7b19 [ 1592.869633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.871695] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.872544] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1592.873359] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1592.874168] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.874962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.875755] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1592.876999] FAULT_INJECTION: forcing a failure. [ 1592.876999] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.878266] CPU: 1 PID: 9268 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1592.879039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.879972] Call Trace: [ 1592.880266] dump_stack+0x107/0x167 [ 1592.880687] should_fail.cold+0x5/0xa [ 1592.881130] ? create_object.isra.0+0x3a/0xa20 [ 1592.881655] should_failslab+0x5/0x20 [ 1592.882089] kmem_cache_alloc+0x5b/0x310 [ 1592.882555] create_object.isra.0+0x3a/0xa20 [ 1592.883062] kmemleak_alloc_percpu+0xa0/0x100 [ 1592.883578] pcpu_alloc+0x4e2/0x1240 [ 1592.884015] __percpu_counter_init+0x10d/0x2d0 [ 1592.884529] io_uring_alloc_task_context+0xcc/0x6a0 [ 1592.885098] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1592.885663] ? find_held_lock+0x2c/0x110 [ 1592.886129] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1592.886673] __io_uring_add_tctx_node+0x2c6/0x520 [ 1592.887237] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1592.887834] __do_sys_io_uring_enter+0x14de/0x1920 [ 1592.888390] ? lock_downgrade+0x6d0/0x6d0 [ 1592.888882] ? find_held_lock+0x2c/0x110 [ 1592.889352] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.889849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.890399] ? wait_for_completion_io+0x270/0x270 [ 1592.890948] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.891475] ? vfs_write+0x354/0xa70 [ 1592.891894] ? fput_many+0x2f/0x1a0 [ 1592.892298] ? ksys_write+0x1a9/0x260 [ 1592.892732] ? __ia32_sys_read+0xb0/0xb0 [ 1592.893222] do_syscall_64+0x33/0x40 [ 1592.893665] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.894265] RIP: 0033:0x7f818218db19 [ 1592.894682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.896850] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.897747] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1592.898597] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1592.899426] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.900272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.901114] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1592.904877] FAULT_INJECTION: forcing a failure. [ 1592.904877] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.906192] CPU: 1 PID: 9273 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1592.906974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.907932] Call Trace: [ 1592.908265] dump_stack+0x107/0x167 [ 1592.908803] should_fail.cold+0x5/0xa [ 1592.909267] ? create_object.isra.0+0x3a/0xa20 [ 1592.909965] should_failslab+0x5/0x20 [ 1592.910490] kmem_cache_alloc+0x5b/0x310 [ 1592.911032] create_object.isra.0+0x3a/0xa20 [ 1592.911597] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.912334] kmem_cache_alloc_trace+0x151/0x320 [ 1592.912881] io_uring_alloc_task_context+0x99/0x6a0 [ 1592.913536] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1592.914170] ? find_held_lock+0x2c/0x110 [ 1592.914759] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1592.915386] __io_uring_add_tctx_node+0x2c6/0x520 [ 1592.916087] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1592.916713] __do_sys_io_uring_enter+0x14de/0x1920 [ 1592.917256] ? lock_downgrade+0x6d0/0x6d0 [ 1592.917750] ? find_held_lock+0x2c/0x110 [ 1592.918324] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.918895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.919561] ? wait_for_completion_io+0x270/0x270 [ 1592.920187] ? rcu_read_lock_any_held+0x75/0xa0 [ 1592.920742] ? vfs_write+0x354/0xa70 [ 1592.921167] ? fput_many+0x2f/0x1a0 [ 1592.921588] ? ksys_write+0x1a9/0x260 [ 1592.922034] ? __ia32_sys_read+0xb0/0xb0 [ 1592.922505] do_syscall_64+0x33/0x40 [ 1592.922939] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.923530] RIP: 0033:0x7f9a776e8b19 [ 1592.923975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.926156] RSP: 002b:00007f9a74c1c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.927031] RAX: ffffffffffffffda RBX: 00007f9a777fc0e0 RCX: 00007f9a776e8b19 [ 1592.927859] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1592.928699] RBP: 00007f9a74c1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.929517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.930430] R13: 00007fff86d8f12f R14: 00007f9a74c1c300 R15: 0000000000022000 20:11:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:11:57 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0xe26]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd_index=0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:11:57 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:11:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:11:57 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:11:57 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, &(0x7f0000000200), 0x200000, &(0x7f0000013800)) umount2(&(0x7f0000001380)='./file0\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x5, 0x4, &(0x7f0000001300)=[{&(0x7f0000000140)="16413b7348b83333b180ace82de81caabdf84b8c5ef64c5954c3a5eaf1356a6255f1709c410b36e5bf618c96445fbea96ecffd08f9951dfdc246ff726f1307dda2137fd1b9a721572a4ae76e477dad53b591fd899ae5c04e7944a6ae0fff6f307848db5fc648f91acbd5b1155f7200732fd79d86832390c816", 0x79, 0x8}, {&(0x7f00000001c0)="9d263b36a2ecaa7225ee84c9364c1a193f5186f7439a7babb0b1a180d6362170cb0db61586c62def5d189d6a0afd38110eed96c876a1a3ce3ee948499334c1f39042f28276b8efc73b2c18f306619ad7a8ea53", 0x53, 0x7}, {&(0x7f0000000240)="50e1a0c280d1dbbba32bdf884ea6efd7234e0539543f1ea142b29e4c859c45a46dbcf33ee9cd5987e74d3f20b182b63c7e9707e2b377cca800ff2d853d42da59e9c8acaed633605c2edf094cee55f01abcd13e74e081fb6046848563782a37cc3cf820ec5a38b5dcebd5b5727376d90ac091a35b1d48fb26ac79fe741724858fcb79bb261ba37d766745466664ea586e11ab85c3c5dd31a2b618281996e3f349aa6200a264b543b1f47309bad62902ac635c2059481968c5c00ec2da4e5016e03ead0d8cb054223309bef0fe258d182920bf103f84cb056f32db51f78f78f014d3e8f29011747e1406922aeeb0eccb15ab14dbb14c566c5dfa53789ce25614b46c814d72af6ce00cb866bf0678c25e34d68e3ed2443b298c456be22d3caff8aed2d4cd3713ec703f97b9da815d8a20ceb9b65ec3d188c3814c9dc947de2e0f668e6b3d2b4459d045bc4f5ad6b3e8ec8286363250e2fe7561e3341155f83e52557a4e8217cb5f196d9a47cb3ba5cb0d7e80303fe5c03661f4004f6caf542078011944450dd53489369af53131a7c8a53278f962d7d1d89cc902c63b93c0b9adfe5803e0ef261acea13ef8235eff564480dfefc2bf4bd38441baee0926b79970021ed26f2736eb2de8977ab6e331799bfd4f852bbadf66e51fbda4a4b04c9fd2bfd82fbe8070fc13e0cff9244a125a4ea22a325bf204404c1c9b89b5bbb7c728739510dd7204ea7da8949c3f230e0744987ea2cd678cefbd6703fb013bb22973ffb5acc560420f49e0a2cc31101c9ac79519ddd2054821d907070d5b7d4f9b7369184ceb1fb661cbb504c256b80f195a275a95cdd803ed4424c47696d9a336ed3c6326f8b321bdba198dc3bc5ffbe81575a48087d756ea015c20389351d7ea6f7a3a746f28b31abe4942406f1e320a5cf7992027f985a2dc8a36c87a6e7482228ffb24a7380a3135caa90b1229e9b0d369d09777c170227a1525c35b9c883622807900db1cf700af6f166f607d9d90a43093c22e8d703212d96196eece07b70967770aac475e5ddc4c64040b099aa50de36a5df3835da19fcaf9f713bb2d05a3f8052bd5c0a747f1408fa4448ce5b9738bd0b669268b6db03eb656768e7324e883468b2e7dbcae22c725f3fa26c8ca5293bec5ec4a2b477e7bbbf3c3c1890dae9b7e0b6ee37ac636e09932fc0c6a1bb11e7df3fe387623bfc6097c5e390e24cdc7a9a7087c44e3f9fc8a847d0f9b016ac4cba2f83cef4b49ff8470f0f90ef396e84a71b79bc3c7299915fabaf1dbf8b92931993840b1769c0ae70c874d4c4271eb63d64c6b5256e899d9909f2d576004a9c52e758937809319feba600b673c064eb752ae43208a90155cf1ff006796b5a3b1b9e69c5359f5b0be821fb49d1692bd75d9d003c1f969accf93c89697ade98160d9e17d20fa26df139f98cbc247a365e64a4d199e2b43ddc21d561211728683e8c7ea20932c89ab2e99cbfb2555bc925e3fdea012b95547b96d3aa8080e22370871460ee3a1cee06ccaa446c69b892ac37d455c463f284d75e03ed51bd8b0d8ced9fe7223c6e2d1694fedb3d3938e472f5b650222f3cb5462499f6d4053bc4c69760f946b014afdf88cbf2f380e001f7091033b4c392beccbb6810c93d689b0c51c7700bc9dce31a77178098d4f61d1761cb8eea27c2ca0cd3dc49766a66acb8030ae4f59977aac0f70694264459d68cfbde19746f29920dcbb1a5cf37db1aace3e29052d21e6b04ef042d6ebd711ef1720e19ab611a338f02ea051bffa0d2bde9cd255a69e839f7549023c19b93ce4a60712ecae56c5cfeb25c9817c95b174fc5e0bbe3c184168a11eb9df4933f3ff84c3e3e221439b9f1b8e16698cca864f548dcd4ed32493b7dda83b425f11769942b5b8a56cc0ee33e477d33eecd37ff488b600a2fee5092145889b6cdbbfd1b503a399a6ba14077276addbd26d471e5efd9882f16fd23282aad9d7129129d603d898f4cb438ec970f1f2b288f98ba2bfe45cdb2e82cbb5e7e08f770b1a417208bb33fff2c6f37d6863a37de2253e6ddfc474542f116242351c2c77d3bb346d137388acf333529405318c800443ce09680ac8fad1e290f11e91ccb429508965fc1c86d9edcc56bafcab08e21ecfa40143884f619310521c8a44787bec9330e570022a0725ac8e375d2f14775a9d1d6201121b914a6d426fc48a4c3031bd82e368c6aba12c48cc2e9e5aa01f2176fed6a4b86b5f363c17f45a223a43b47f1e87fb2824918e483cd1624ba53fd2ef4993d6732332d9a0929f01d27c4395869038653ed5d09ece41c3cc3e9c9bacde6143b97ceec32dd243c0360c42a9012829d97d9edc3994abc519ebefe482e021b460df741fa7d86d116f363a9539792383b6663c2ab8216eaa192ac71e6493e3ca1a40e1b9a623b8a9c4e7b751575075b3859d3a2a777722ddb6a57ebb99b8267880d789821d18f57d508c91f0bcb91344ee79f90d03460a0e7cbdd413d947ffda392a189486968a9b88616d23116f6d30757760413e04103df3e9c8080fe293fdfc66a1b17a61bc263b47ce9956db9f3a8632bef4b2d83c06634c80a4a923ae6f2db2a7f0b1ce4d2f7c7c8e9d770bf887eeeec59a051648e04fe588c38c03ae8c496597fb7a372dccdc46ab4de2588c2b2d39de8510e12f65628a279cfebf2b370435c44a930db710aa65ebf77be4e0d261c77c60d1e5706de2dbc522ab35cbaf792d0a6c2a0db93e7cf7932b27e1f1984da2942dc413985c4453ae0dd3254ca2773e1d3dccb60778cc5eb2628b4053b4801ee37b606038c01c3b959324c49894128335bc1be649555f617f56ce2be1fd7b596f7e4e60a7beee417f4478b544b604d3d6d43c8611bff55c4c4c1ef38972e2f55e18864d890803ec05ea0637addb103aecb570506653730f163fdccb1701116fef4da4adb3502c6cd44e9d9aaaa9a291fab9c595682e24f41835cdf9ad136b493981de7e25082c288471bb47affacb773d272d1668646a935d04b0203493fd4c909f2026c5652a0c5b23a77f75ef2d405470cf7d239e2aecd657cdbb420fa0cbe16676dcd9e5ae04050a18f1e3b7771932dc970dfc65c8051508d62a5453aaa1529bfa73498aa1c79dd2fe162a846ec0c6c70664a6375e17d0f1a35ab58508b613eedb9bf7cb450afb4d0f6aa2966efd0da7a832a3f8f6287d3e954dee7112b15f6f51c7ab62404f460136f0df41ddf0781756bc7116f528d6b8bd9c39fb1c41fd8ef6ab312be9bd7bb1e002bea4b2c4af043b3ff64eefba3d5d3b7cea33784a65632c932d1df9f2cbaff7024397d89af20c66992b03ddbd5c9007b1de98239c9ffeffd0a3e5ebf907f27dcdd4e73e84debf186919ae6a994b96e0297825712bb97c2b3e535b4e339c6de6431e30fa9efd0b00dd4d00adf8a5b1fe47bafc22ec3507480c8486ebaa917f7a7c2b6fc248bb9234c30b56613da27d151179d1a53cb438f2e0ed4c4a50c8a20c84b79eb9429dccd3283f26d14d157f2a8a4258be4d46d6a836ca08c285b4cfb1cf91babbcc00a7fb93aba23030027632f03c035deb5dde8c19a086d4bb4a297461fc679f1c1d8a7c0a06285ad47b6de328882de4721e3c2aee18b66aa336aadd093eb139397eca45fe23fd8a9c2006f233b73ec2963f0f6574ff138a844e6222d310fdb7ae07804975e88d7e78499adbd800bff04819406c0e5819445c02d5464c68e36cf971db84118f9942384626e6063fb7dc9d9d650ca2711c9a708452cd8e0488605de029cc9291c76b64737938fd442f9fe9eca1b9b42d796d8246434ca8f05c8d1ca5fb9cb13aa97b04df5f79278f97b9fbc999105acc377ee6ae5ec4c50b4448e363e24e5b4458e0a75478c24018b4ea4ae1bdf3988d69322c70bcffa07a6f9912bd1654ccd5f4f599dc818bf3de32859c327683d57859a7363a1b6815a7b31d90c7f5ec897e698ceac32153c9b4a609f1b818fdc694a7f0f7a679840dadf7eeaa3925a1d02677ce3b94da04938f46674d275a653dc9690885ea307194c9253bcf3de842096cf53b07c3e3af104523af161e5848f5d829ddc47a808bbb1addb0695f6ffdde244d421b14bf718047842469876787b53d7956beea2628a4aaf27b8ca1d9a403f061d7d7cdc0ceb8c27dd3c5c10cbdfaaf8ab936146b7b7c951dca91f5533be4b80b37c9124ef52b4113f92c1aa5cb3f9626a283f65c2c4e0fce1b97bae2032a0937d1ca7c8e873cea7d70025f8e20a2b7938b7d153bbce0711253e755e19a40993a61d8de6e03b99c9c5bce190622d853c09f861957feb662a07a412f673a8e2bda9649b34f2ce1e64cefd1c8bad5d9d5c9b9548cd0a60b676ee8a6be8b413ced66f40576d103c6666c453481e25b6cd9e9fc820a45a9954d4a1367f423ed10dffa990afb1c20ad97271099aeca02e38f41b186313744ab77e43fcda19a634e1e32fd58325ea814e8ff4fcea58a5d16948ff078c5f2c9b03181bea334cc66abb2c71577c5dc59dfe26d88bb9b074da4177ae52539ef94dfb6792bda460b82a6872e0303d1ef437c3c8666e3d2626193fefd67399f599b5d0ead0c6a089fb75bd9d95fe8a9dc636c05eb6bb9fcc7847447a3a7561c491d8cc54bdb502b2b21b16923f7fff64e38010f11fc40890e95c8ba06bca81b2a17f41629b901cab6b75d81cec47ee5937f8d4d1c9c43db40c207c6aac045a8781438262f2f53b317151a32b6710ecd4e10bfbf52b8ca63b224cea61f9265c276727e36ff7e034ad6ae3061ce82d904953887c7d3e746de78f8666a8630d3256331c760b4b8d88e9a54814c1c2b75a78400f95181d6f8e69e61f8f50e29a4d1b66c560bd6aa89f3475a848d63ca8552c98558f799cee6fd99093014ba4c00a7367122051d3dc5a3de10ba9a5282a909e9ffd902659049338e005acf64f37e835cab5e5aecefc552cf4086e140187bf811dae2e2321794d18f54f4d53097490ed2800d5e80770c92a1cb75d51e7b7416ea02df0998109c5de925d13c235a0c6a72cbce1fdaa3f293c4f34ed4f1d0cff7105558070f56d4a695f64e832451bada12e18e5b69b45726de6acb3e98743cd42fb5ffb597318fe2d4b9cdadbe3386498a2f82d213390dabfef2be0908f770d4c62f0f1a92ce98096daf01f100559c30024c9b28421516ad1907234001d0e32352451814508680926374294a0671b7454e8f68673a27958427db4e5eea13a075d57dd2c2510b2c6b4fb3346d89e5d5cafb5fd3a30a01c309ebaae92aadc5471cc8e3094a15b7ec90a6c1a0fb4bd8b3e14d9477be423231e496dc1e8cccbc26dc2c70935da9ba954fb0e5d515d1b9dd6ec2c10c64a0d64b60383a06bbeba75d2668b2637be73b1314e045e2efbb44b563aac9b859357357a7df8fadff40262bfcaeee075485bd7554f557f14b3b2a7029926d630514795e735df1cf27e20dfb973d7fe67ac622b11faa53b16fe5ee9086f1bc7a4b90e85dba038622f0a5bd29d5828c3f93ce54c21c41c7acc4c6b0139bebba4539d393984fc0ca31cfb57e3b2fb09099b8c486f0577020cdce0146785c388a6c4744a33a97a87ea7dfbb143f06560d4fba1f048b47a8f6826ef050d516e853b4d14154560219801403f063ea6b038327a78b51df3b0252156f5a81ebab4d8f44be02ee4586e4270ebc26c08038e247e6f8943a18d0458ed22cb6708edc48827c6a0733aedcaa347339e0570ca7f41bb8a53387d3e56a684fc107eb4f93988bb781b9acdff2249adf3572654d9e6384cc1ee97fa6", 0x1000}, {&(0x7f0000001240)="a987a70c48f3444b0f45957b383263b7238104754f961ca84aedc751c6ffbf2c1ccd184bde66f1d3b452ea1f29d0ea59047b89d1c6125c2d4546e0d4c2454ab1279ba050ab1936c0e7870f8f9b9e9596a723f043c2548fa73a2d450e4e552170594e103eec026c1caccfc13c5e65423e1aa81138400379d3860e50762b6513425ec935d8df63f42cb08a3a66ff8a6561249b46f76d469fda5dc3b11b7115588c93ecb79fac69bca1fff9422693163f3ea53df165a495448380a9fb0e7214", 0xbe, 0x8}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='ext4\x00,ext4\x00,@,-&D,\":,ext4\x00,\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20d315) accept4$unix(r1, &(0x7f00000013c0), &(0x7f0000001440)=0x6e, 0x800) fcntl$addseals(r0, 0x409, 0x2) [ 1593.282571] FAULT_INJECTION: forcing a failure. [ 1593.282571] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.284171] CPU: 1 PID: 9292 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1593.285012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.285915] Call Trace: [ 1593.286211] dump_stack+0x107/0x167 [ 1593.286608] should_fail.cold+0x5/0xa [ 1593.287035] ? create_object.isra.0+0x3a/0xa20 [ 1593.287540] should_failslab+0x5/0x20 [ 1593.287960] kmem_cache_alloc+0x5b/0x310 [ 1593.288525] create_object.isra.0+0x3a/0xa20 [ 1593.289019] kmemleak_alloc_percpu+0xa0/0x100 [ 1593.289518] pcpu_alloc+0x4e2/0x1240 [ 1593.289935] __percpu_counter_init+0x10d/0x2d0 [ 1593.290445] io_uring_alloc_task_context+0xcc/0x6a0 [ 1593.290991] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1593.291539] ? find_held_lock+0x2c/0x110 [ 1593.291987] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1593.292533] __io_uring_add_tctx_node+0x2c6/0x520 [ 1593.293156] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1593.293867] __do_sys_io_uring_enter+0x14de/0x1920 [ 1593.294406] ? lock_downgrade+0x6d0/0x6d0 [ 1593.294959] ? find_held_lock+0x2c/0x110 [ 1593.295409] ? io_submit_sqes+0x85c0/0x85c0 [ 1593.296020] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1593.296611] ? wait_for_completion_io+0x270/0x270 [ 1593.297169] ? rcu_read_lock_any_held+0x75/0xa0 [ 1593.297781] ? vfs_write+0x354/0xa70 [ 1593.298227] ? fput_many+0x2f/0x1a0 [ 1593.298635] ? ksys_write+0x1a9/0x260 [ 1593.299147] ? __ia32_sys_read+0xb0/0xb0 [ 1593.299675] do_syscall_64+0x33/0x40 [ 1593.300120] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1593.300731] RIP: 0033:0x7f9a776e8b19 [ 1593.301217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.303354] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1593.304179] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1593.304985] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1593.305860] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.306729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.307661] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:11:57 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000200)={0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) readv(r5, &(0x7f0000000880)=[{&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000007c0)=""/170, 0xaa}], 0x7) 20:11:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(0xffffffffffffffff, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:11:57 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) (fail_nth: 14) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1593.487987] FAULT_INJECTION: forcing a failure. [ 1593.487987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1593.489611] CPU: 1 PID: 9300 Comm: syz-executor.2 Not tainted 5.10.197 #1 [ 1593.490366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.491261] Call Trace: [ 1593.491562] dump_stack+0x107/0x167 [ 1593.491983] should_fail.cold+0x5/0xa [ 1593.492410] __alloc_pages_nodemask+0x182/0x600 [ 1593.492920] ? xa_load+0x12d/0x2c0 [ 1593.493308] ? lock_downgrade+0x6d0/0x6d0 [ 1593.493762] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1593.494410] alloc_pages_current+0x187/0x280 [ 1593.494885] __page_cache_alloc+0x2d2/0x360 [ 1593.495356] page_cache_ra_unbounded+0x207/0x6f0 [ 1593.495865] ? read_pages+0xbc0/0xbc0 [ 1593.496275] ? __lock_page_or_retry+0x4e0/0x4e0 [ 1593.496817] ondemand_readahead+0x8e5/0x1150 [ 1593.497316] page_cache_sync_ra+0x138/0x170 [ 1593.497791] generic_file_buffered_read+0xc8e/0x2920 [ 1593.498371] ? pagecache_get_page+0xc80/0xc80 [ 1593.498859] ? lock_chain_count+0x20/0x20 [ 1593.499318] ? mark_lock+0xf5/0x2df0 [ 1593.499729] ? mark_lock+0xf5/0x2df0 [ 1593.500148] generic_file_read_iter+0x33f/0x490 [ 1593.500658] ? lock_chain_count+0x20/0x20 [ 1593.501137] ext4_file_read_iter+0x184/0x4c0 [ 1593.501620] generic_file_splice_read+0x455/0x6d0 [ 1593.502159] ? pipe_to_user+0x170/0x170 [ 1593.502596] ? _cond_resched+0x12/0x80 [ 1593.503031] ? avc_policy_seqno+0x9/0x70 [ 1593.503473] ? selinux_file_permission+0x92/0x520 [ 1593.504009] ? pipe_to_user+0x170/0x170 [ 1593.504449] do_splice_to+0x10e/0x160 [ 1593.504883] splice_direct_to_actor+0x2fe/0x980 [ 1593.505402] ? pipe_to_sendpage+0x380/0x380 [ 1593.505876] ? do_splice_to+0x160/0x160 [ 1593.506315] ? security_file_permission+0x24e/0x570 [ 1593.506860] do_splice_direct+0x1c4/0x290 [ 1593.507308] ? splice_direct_to_actor+0x980/0x980 [ 1593.507831] ? selinux_file_permission+0x92/0x520 [ 1593.508360] ? security_file_permission+0x24e/0x570 [ 1593.508931] do_sendfile+0x553/0x1090 [ 1593.509363] ? do_pwritev+0x270/0x270 [ 1593.509786] ? wait_for_completion_io+0x270/0x270 [ 1593.510325] ? rcu_read_lock_any_held+0x75/0xa0 [ 1593.510836] ? vfs_write+0x354/0xa70 [ 1593.511247] __x64_sys_sendfile64+0x1d1/0x210 [ 1593.511733] ? __ia32_sys_sendfile+0x220/0x220 [ 1593.512250] do_syscall_64+0x33/0x40 [ 1593.512661] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1593.513238] RIP: 0033:0x7f9343a7fb19 [ 1593.513645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.515666] RSP: 002b:00007f9340ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1593.516503] RAX: ffffffffffffffda RBX: 00007f9343b92f60 RCX: 00007f9343a7fb19 [ 1593.517297] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1593.518082] RBP: 00007f9340ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.518870] R10: 000000000020d315 R11: 0000000000000246 R12: 0000000000000002 [ 1593.519656] R13: 00007fff3814490f R14: 00007f9340ff5300 R15: 0000000000022000 20:12:12 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:12:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(0xffffffffffffffff, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:12:12 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) (fail_nth: 15) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:12 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 20:12:12 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:12:12 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 20:12:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 20:12:12 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000002c0)=""/209) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f00000008c0)="380a3aa229465804265b06340c504f70143f80e6776b5c6796368544a60ddc155cd62ef7d4e4abdac0fd2bb2ea4680284b2a2aeb0b955a2fce97a01f5f356b6fbcebcc085068a9674788c7c472fbd884f919c6210b1f28d0e19429c91133350949157fc359ca3ad3f8261277ab79d3b6ab6f9521f1cec1a3d5e33fee6ef7eb940705b01c603911da26d58f3cab5eb316a8c622bed2854af77db85b75da92164b88fcf7b9861ed4dfa1617f337b518cc2cfe0d6303eb98d2fab4c3d6277d9fa5ba774b7173feeda76a650543dc43b8da9b27817934a42097077b583dfbf7fe722") r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="84f70000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250a00000010000280040004000800020007000000"], 0x24}}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200080000f681e1b40000000000"], 0x1c}}, 0x0) [ 1608.178170] FAULT_INJECTION: forcing a failure. [ 1608.178170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.180783] CPU: 1 PID: 9313 Comm: syz-executor.2 Not tainted 5.10.197 #1 [ 1608.182197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.183891] Call Trace: [ 1608.184436] dump_stack+0x107/0x167 [ 1608.185192] should_fail.cold+0x5/0xa [ 1608.185974] __alloc_pages_nodemask+0x182/0x600 [ 1608.186910] ? xa_load+0x12d/0x2c0 [ 1608.187644] ? lock_downgrade+0x6d0/0x6d0 [ 1608.188494] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1608.189758] alloc_pages_current+0x187/0x280 [ 1608.190650] __page_cache_alloc+0x2d2/0x360 [ 1608.191536] page_cache_ra_unbounded+0x207/0x6f0 [ 1608.192508] ? read_pages+0xbc0/0xbc0 [ 1608.193288] ? __lock_page_or_retry+0x4e0/0x4e0 [ 1608.194248] ondemand_readahead+0x8e5/0x1150 [ 1608.195168] page_cache_sync_ra+0x138/0x170 [ 1608.196042] generic_file_buffered_read+0xc8e/0x2920 [ 1608.197103] ? pagecache_get_page+0xc80/0xc80 [ 1608.198005] ? lock_chain_count+0x20/0x20 [ 1608.198843] ? mark_lock+0xf5/0x2df0 [ 1608.199599] ? mark_lock+0xf5/0x2df0 [ 1608.200357] generic_file_read_iter+0x33f/0x490 [ 1608.201309] ? lock_chain_count+0x20/0x20 [ 1608.202154] ext4_file_read_iter+0x184/0x4c0 [ 1608.203053] generic_file_splice_read+0x455/0x6d0 [ 1608.204025] ? pipe_to_user+0x170/0x170 [ 1608.204825] ? _cond_resched+0x12/0x80 [ 1608.205649] ? avc_policy_seqno+0x9/0x70 [ 1608.206471] ? selinux_file_permission+0x92/0x520 [ 1608.207474] ? pipe_to_user+0x170/0x170 [ 1608.208279] do_splice_to+0x10e/0x160 [ 1608.209070] splice_direct_to_actor+0x2fe/0x980 [ 1608.210020] ? pipe_to_sendpage+0x380/0x380 [ 1608.210904] ? do_splice_to+0x160/0x160 [ 1608.211710] ? security_file_permission+0x24e/0x570 [ 1608.212747] do_splice_direct+0x1c4/0x290 [ 1608.213605] ? splice_direct_to_actor+0x980/0x980 [ 1608.214584] ? selinux_file_permission+0x92/0x520 [ 1608.215567] ? security_file_permission+0x24e/0x570 [ 1608.216593] do_sendfile+0x553/0x1090 [ 1608.217390] ? do_pwritev+0x270/0x270 [ 1608.218167] ? wait_for_completion_io+0x270/0x270 [ 1608.219143] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.220076] ? vfs_write+0x354/0xa70 [ 1608.220838] __x64_sys_sendfile64+0x1d1/0x210 [ 1608.221750] ? __ia32_sys_sendfile+0x220/0x220 [ 1608.222704] do_syscall_64+0x33/0x40 [ 1608.223456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.224461] FAULT_INJECTION: forcing a failure. [ 1608.224461] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.226676] RIP: 0033:0x7f9343a7fb19 [ 1608.227442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.231107] RSP: 002b:00007f9340ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1608.232658] RAX: ffffffffffffffda RBX: 00007f9343b92f60 RCX: 00007f9343a7fb19 [ 1608.234092] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1608.235506] RBP: 00007f9340ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.236933] R10: 000000000020d315 R11: 0000000000000246 R12: 0000000000000002 [ 1608.238349] R13: 00007fff3814490f R14: 00007f9340ff5300 R15: 0000000000022000 [ 1608.239842] CPU: 0 PID: 9323 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1608.241194] FAULT_INJECTION: forcing a failure. [ 1608.241194] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.241270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.245212] Call Trace: [ 1608.245753] dump_stack+0x107/0x167 [ 1608.246503] should_fail.cold+0x5/0xa [ 1608.247285] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1608.248297] should_failslab+0x5/0x20 [ 1608.249092] kmem_cache_alloc_trace+0x55/0x320 [ 1608.250023] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1608.250992] __io_uring_add_tctx_node+0x15c/0x520 [ 1608.251966] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1608.253041] __do_sys_io_uring_enter+0x14de/0x1920 [ 1608.254049] ? lock_downgrade+0x6d0/0x6d0 [ 1608.254875] ? find_held_lock+0x2c/0x110 [ 1608.255708] ? io_submit_sqes+0x85c0/0x85c0 [ 1608.256580] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.257567] ? wait_for_completion_io+0x270/0x270 [ 1608.258536] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.259469] ? vfs_write+0x354/0xa70 [ 1608.260235] ? fput_many+0x2f/0x1a0 [ 1608.260985] ? ksys_write+0x1a9/0x260 [ 1608.261760] ? __ia32_sys_read+0xb0/0xb0 [ 1608.262593] do_syscall_64+0x33/0x40 [ 1608.263361] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.264388] RIP: 0033:0x7f824c5c0b19 [ 1608.265153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.268833] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.270366] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1608.271786] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1608.273221] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.274678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.276100] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 [ 1608.277569] CPU: 1 PID: 9324 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1608.278954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.280621] Call Trace: [ 1608.281170] dump_stack+0x107/0x167 [ 1608.281913] should_fail.cold+0x5/0xa [ 1608.282690] ? io_wq_create+0x6ef/0xc00 [ 1608.283492] should_failslab+0x5/0x20 [ 1608.284259] kmem_cache_alloc_node_trace+0x59/0x340 [ 1608.285277] io_wq_create+0x6ef/0xc00 [ 1608.286055] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1608.287077] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1608.288082] ? io_apoll_task_func+0x2d0/0x2d0 [ 1608.288986] ? __io_req_find_next+0x300/0x300 [ 1608.289894] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1608.290868] __io_uring_add_tctx_node+0x2c6/0x520 [ 1608.291839] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1608.292927] __do_sys_io_uring_enter+0x14de/0x1920 [ 1608.293922] ? lock_downgrade+0x6d0/0x6d0 [ 1608.294755] ? find_held_lock+0x2c/0x110 [ 1608.295582] ? io_submit_sqes+0x85c0/0x85c0 [ 1608.296464] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.297447] ? wait_for_completion_io+0x270/0x270 [ 1608.298412] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.299345] ? vfs_write+0x354/0xa70 [ 1608.300101] ? fput_many+0x2f/0x1a0 [ 1608.300837] ? ksys_write+0x1a9/0x260 [ 1608.301630] ? __ia32_sys_read+0xb0/0xb0 [ 1608.302468] do_syscall_64+0x33/0x40 [ 1608.303220] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.304252] RIP: 0033:0x7f27221a7b19 [ 1608.305017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.308710] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.310243] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1608.311673] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1608.313119] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.314551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.315980] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1608.320389] FAULT_INJECTION: forcing a failure. [ 1608.320389] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.323514] CPU: 0 PID: 9325 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1608.325235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.327211] Call Trace: [ 1608.327856] dump_stack+0x107/0x167 [ 1608.328732] should_fail.cold+0x5/0xa [ 1608.329651] ? io_wq_create+0xeb/0xc00 [ 1608.330589] should_failslab+0x5/0x20 [ 1608.331504] __kmalloc+0x72/0x390 [ 1608.332341] io_wq_create+0xeb/0xc00 [ 1608.333265] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1608.334373] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1608.335376] ? io_apoll_task_func+0x2d0/0x2d0 [ 1608.336268] ? __io_req_find_next+0x300/0x300 [ 1608.337177] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1608.338148] __io_uring_add_tctx_node+0x2c6/0x520 [ 1608.339135] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1608.340216] __do_sys_io_uring_enter+0x14de/0x1920 [ 1608.341210] ? lock_downgrade+0x6d0/0x6d0 [ 1608.342035] ? find_held_lock+0x2c/0x110 [ 1608.342859] ? io_submit_sqes+0x85c0/0x85c0 [ 1608.343732] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.344712] ? wait_for_completion_io+0x270/0x270 [ 1608.345704] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.346632] ? vfs_write+0x354/0xa70 [ 1608.347382] ? fput_many+0x2f/0x1a0 [ 1608.348113] ? ksys_write+0x1a9/0x260 [ 1608.348876] ? __ia32_sys_read+0xb0/0xb0 [ 1608.349717] do_syscall_64+0x33/0x40 [ 1608.350466] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.351493] RIP: 0033:0x7f818218db19 [ 1608.352240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.355930] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.357459] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1608.358886] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1608.360310] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.361740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.363165] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1608.380123] FAULT_INJECTION: forcing a failure. [ 1608.380123] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.382456] CPU: 0 PID: 9326 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1608.383835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.385525] Call Trace: [ 1608.386070] dump_stack+0x107/0x167 [ 1608.386816] should_fail.cold+0x5/0xa [ 1608.387585] ? create_object.isra.0+0x3a/0xa20 [ 1608.388507] ? create_object.isra.0+0x3a/0xa20 [ 1608.389447] should_failslab+0x5/0x20 [ 1608.390232] kmem_cache_alloc+0x5b/0x310 [ 1608.391083] create_object.isra.0+0x3a/0xa20 [ 1608.392006] kmemleak_alloc_percpu+0xa0/0x100 [ 1608.392954] pcpu_alloc+0x4e2/0x1240 [ 1608.393764] __percpu_counter_init+0x10d/0x2d0 [ 1608.394713] io_uring_alloc_task_context+0xcc/0x6a0 [ 1608.395757] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1608.396776] ? find_held_lock+0x2c/0x110 [ 1608.397643] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1608.398638] __io_uring_add_tctx_node+0x2c6/0x520 [ 1608.399623] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1608.400726] __do_sys_io_uring_enter+0x14de/0x1920 [ 1608.401750] ? lock_downgrade+0x6d0/0x6d0 [ 1608.402589] ? find_held_lock+0x2c/0x110 [ 1608.403439] ? io_submit_sqes+0x85c0/0x85c0 [ 1608.404338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.405353] ? wait_for_completion_io+0x270/0x270 [ 1608.406346] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.407301] ? vfs_write+0x354/0xa70 [ 1608.408075] ? fput_many+0x2f/0x1a0 [ 1608.408828] ? ksys_write+0x1a9/0x260 [ 1608.409616] ? __ia32_sys_read+0xb0/0xb0 [ 1608.410489] do_syscall_64+0x33/0x40 [ 1608.411267] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.412323] RIP: 0033:0x7f9a776e8b19 [ 1608.413090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.416805] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.418368] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1608.419812] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1608.421270] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.422719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.424176] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:12:12 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) (fail_nth: 16) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1608.618971] FAULT_INJECTION: forcing a failure. [ 1608.618971] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.621590] CPU: 1 PID: 9331 Comm: syz-executor.2 Not tainted 5.10.197 #1 [ 1608.622989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.624673] Call Trace: [ 1608.625234] dump_stack+0x107/0x167 [ 1608.625979] should_fail.cold+0x5/0xa [ 1608.626758] __alloc_pages_nodemask+0x182/0x600 [ 1608.627708] ? xa_load+0x12d/0x2c0 [ 1608.628443] ? lock_downgrade+0x6d0/0x6d0 [ 1608.629302] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1608.630549] alloc_pages_current+0x187/0x280 [ 1608.631445] __page_cache_alloc+0x2d2/0x360 [ 1608.632334] page_cache_ra_unbounded+0x207/0x6f0 [ 1608.633329] ? read_pages+0xbc0/0xbc0 [ 1608.634102] ? __lock_page_or_retry+0x4e0/0x4e0 [ 1608.635064] ondemand_readahead+0x8e5/0x1150 [ 1608.635971] page_cache_sync_ra+0x138/0x170 [ 1608.636852] generic_file_buffered_read+0xc8e/0x2920 [ 1608.637929] ? pagecache_get_page+0xc80/0xc80 [ 1608.638841] ? lock_chain_count+0x20/0x20 [ 1608.639683] ? mark_lock+0xf5/0x2df0 [ 1608.640438] ? mark_lock+0xf5/0x2df0 [ 1608.641206] generic_file_read_iter+0x33f/0x490 [ 1608.642151] ? lock_chain_count+0x20/0x20 [ 1608.643002] ext4_file_read_iter+0x184/0x4c0 [ 1608.643896] generic_file_splice_read+0x455/0x6d0 [ 1608.644900] ? pipe_to_user+0x170/0x170 [ 1608.645896] ? _cond_resched+0x12/0x80 [ 1608.646917] ? avc_policy_seqno+0x9/0x70 20:12:13 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x8) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x2f2, 0x0, 0x0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) write$P9_RUNLINKAT(r4, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) io_uring_enter(r1, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file1\x00'}) r6 = openat(r5, &(0x7f0000000080)='./file1\x00', 0x105142, 0x121) r7 = syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0xc7, 0x4, &(0x7f0000001680)=[{&(0x7f00000003c0)="a6038cc06f7f5d6411dec9699eb4f3d5be41867abb0ed3bf50d2b75c4aebfea8a5164d569f1e9e4af857c3b8e12302570b6a3fe314914436153232033e838d492155ae2f7702d3a81a110cc0d5ab9e13443faee124224e93b6dd9d85eceb9d10e1c075b4fc18951ada9a87bd7553ff21613b5b73ec1fd306cdfdfb0e42aee2fa1df36ad5801816497e619df6786a33b95039c72e127ca3d3233d8e37aa76f19f71a75bc7070c9502b2e2281d5ddbbb0b45d0c6082ea107eb8e1834663abe48cdfcf8af", 0xc3, 0x5f639901}, {&(0x7f00000004c0)="d12af67d83ad101a2f345d03ead1e3646283cb8f154975bcc31066558078e7b0c82a1410df64fd7e151f9ae45d734a4435bd542b783417f04c2a60d55ca388dc59ab58728c9d3053dbf48d37d942f5d9042be67f221fc181289f8139d53970ddd166fa0f9c470b20d1e7c8debb9c416f3f050ed75134e3eabf7fdf167eb6658b3e986213dea79b1e43c968559a8c2a6eb55fb60f0f144d636daf20e609909faf86d07eb2964d746a3de4acad2721f0abf296d091547970d4e192e9c6895f47687970f4650f571e9fa8faf6d53114b953c80ec812ca18f736d68cff614417c37b0b7bfb60c32306353e8dde", 0xeb, 0x3}, {&(0x7f00000005c0)="2435577dd3b6737df531b205d945e4cd779e1e36ef1a968c48a07244010b3a80b8f7df42690f16fc051081726fc72090e4d21dd59b1b9bac0333d3d11a5c7a4ebefb76548b59eb7713e7ab868ef1338cfdff5b1c0f838da318aca5a101a921af4879fd6b7a8d21091f877c99e329e5800f1a0f0fcb1ac4eef38705dd42ef9d2e9d654bce25d423285570c255420dc36f8efcc56592eac3ffdfc185f6946b4fe5", 0xa0, 0x100}, {&(0x7f0000000680)="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", 0x1000, 0x2}], 0x4800, &(0x7f0000001700)={[{@uid={'uid', 0x3d, 0xee00}}], [{@seclabel}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x1, r7, 0x0, 0x80000}) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1608.647859] ? selinux_file_permission+0x92/0x520 [ 1608.649032] ? pipe_to_user+0x170/0x170 [ 1608.649897] do_splice_to+0x10e/0x160 [ 1608.650674] splice_direct_to_actor+0x2fe/0x980 [ 1608.651621] ? pipe_to_sendpage+0x380/0x380 [ 1608.652500] ? do_splice_to+0x160/0x160 [ 1608.653325] ? security_file_permission+0x24e/0x570 [ 1608.654345] do_splice_direct+0x1c4/0x290 [ 1608.655186] ? splice_direct_to_actor+0x980/0x980 [ 1608.656154] ? selinux_file_permission+0x92/0x520 [ 1608.657147] ? security_file_permission+0x24e/0x570 [ 1608.658172] do_sendfile+0x553/0x1090 [ 1608.658960] ? do_pwritev+0x270/0x270 [ 1608.659733] ? wait_for_completion_io+0x270/0x270 [ 1608.660712] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.661656] ? vfs_write+0x354/0xa70 [ 1608.662418] __x64_sys_sendfile64+0x1d1/0x210 [ 1608.663346] ? __ia32_sys_sendfile+0x220/0x220 [ 1608.664307] do_syscall_64+0x33/0x40 [ 1608.665089] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.666125] RIP: 0033:0x7f9343a7fb19 [ 1608.666880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.670623] RSP: 002b:00007f9340ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1608.672179] RAX: ffffffffffffffda RBX: 00007f9343b92f60 RCX: 00007f9343a7fb19 [ 1608.673639] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1608.675079] RBP: 00007f9340ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.676553] R10: 000000000020d315 R11: 0000000000000246 R12: 0000000000000002 [ 1608.678013] R13: 00007fff3814490f R14: 00007f9340ff5300 R15: 0000000000022000 20:12:13 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1608.773069] ISOFS: Unable to identify CD-ROM format. 20:12:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(0xffffffffffffffff, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1608.896921] FAULT_INJECTION: forcing a failure. [ 1608.896921] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.899384] CPU: 0 PID: 9350 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1608.900848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.902528] Call Trace: [ 1608.903086] dump_stack+0x107/0x167 [ 1608.903850] should_fail.cold+0x5/0xa [ 1608.904646] ? io_wq_create+0xeb/0xc00 [ 1608.905467] should_failslab+0x5/0x20 [ 1608.906245] __kmalloc+0x72/0x390 [ 1608.906975] io_wq_create+0xeb/0xc00 [ 1608.907772] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1608.908823] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1608.909860] ? io_apoll_task_func+0x2d0/0x2d0 [ 1608.910778] ? __io_req_find_next+0x300/0x300 [ 1608.911704] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1608.912716] __io_uring_add_tctx_node+0x2c6/0x520 [ 1608.913711] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1608.914804] __do_sys_io_uring_enter+0x14de/0x1920 [ 1608.915815] ? lock_downgrade+0x6d0/0x6d0 [ 1608.916662] ? find_held_lock+0x2c/0x110 [ 1608.917519] ? io_submit_sqes+0x85c0/0x85c0 [ 1608.918427] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1608.919417] ? wait_for_completion_io+0x270/0x270 [ 1608.920406] ? rcu_read_lock_any_held+0x75/0xa0 [ 1608.921387] ? vfs_write+0x354/0xa70 [ 1608.922162] ? fput_many+0x2f/0x1a0 [ 1608.922913] ? ksys_write+0x1a9/0x260 [ 1608.923704] ? __ia32_sys_read+0xb0/0xb0 [ 1608.924576] do_syscall_64+0x33/0x40 [ 1608.925351] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1608.926409] RIP: 0033:0x7f9a776e8b19 [ 1608.927167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.930900] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1608.932444] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1608.933911] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1608.935363] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.936820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.938293] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:12:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/120], 0x78) 20:12:13 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:12:13 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 20:12:13 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 20:12:13 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1609.168747] FAULT_INJECTION: forcing a failure. [ 1609.168747] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.171092] CPU: 1 PID: 9362 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1609.172478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1609.174186] Call Trace: [ 1609.174734] dump_stack+0x107/0x167 [ 1609.175486] should_fail.cold+0x5/0xa [ 1609.176273] ? create_object.isra.0+0x3a/0xa20 [ 1609.177229] should_failslab+0x5/0x20 [ 1609.178005] kmem_cache_alloc+0x5b/0x310 [ 1609.178828] ? io_wq_create+0x114/0xc00 [ 1609.179642] create_object.isra.0+0x3a/0xa20 [ 1609.180528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1609.181581] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1609.182625] io_wq_create+0x6ef/0xc00 [ 1609.183410] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1609.184446] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1609.185468] ? io_apoll_task_func+0x2d0/0x2d0 [ 1609.186362] ? __io_req_find_next+0x300/0x300 [ 1609.187277] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1609.188263] __io_uring_add_tctx_node+0x2c6/0x520 [ 1609.189221] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1609.190240] __do_sys_io_uring_enter+0x14de/0x1920 [ 1609.191204] ? lock_downgrade+0x6d0/0x6d0 [ 1609.192001] ? find_held_lock+0x2c/0x110 [ 1609.192811] ? io_submit_sqes+0x85c0/0x85c0 [ 1609.193708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1609.194684] ? wait_for_completion_io+0x270/0x270 [ 1609.195654] ? rcu_read_lock_any_held+0x75/0xa0 [ 1609.196588] ? vfs_write+0x354/0xa70 [ 1609.197350] ? fput_many+0x2f/0x1a0 [ 1609.198085] ? ksys_write+0x1a9/0x260 [ 1609.198861] ? __ia32_sys_read+0xb0/0xb0 [ 1609.199679] do_syscall_64+0x33/0x40 [ 1609.200425] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1609.201464] RIP: 0033:0x7f27221a7b19 [ 1609.202191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.205934] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1609.207470] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1609.208916] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1609.210365] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.211812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.213321] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1609.224740] FAULT_INJECTION: forcing a failure. [ 1609.224740] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.227262] CPU: 0 PID: 9363 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1609.228687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1609.230371] Call Trace: [ 1609.230783] FAULT_INJECTION: forcing a failure. [ 1609.230783] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.230911] dump_stack+0x107/0x167 [ 1609.230946] should_fail.cold+0x5/0xa [ 1609.230972] ? create_object.isra.0+0x3a/0xa20 [ 1609.235775] should_failslab+0x5/0x20 [ 1609.236563] kmem_cache_alloc+0x5b/0x310 [ 1609.237380] create_object.isra.0+0x3a/0xa20 [ 1609.238281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1609.239308] kmem_cache_alloc_trace+0x151/0x320 [ 1609.240257] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1609.241244] __io_uring_add_tctx_node+0x15c/0x520 [ 1609.242200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1609.243264] __do_sys_io_uring_enter+0x14de/0x1920 [ 1609.244234] ? lock_downgrade+0x6d0/0x6d0 [ 1609.245080] ? find_held_lock+0x2c/0x110 [ 1609.245908] ? io_submit_sqes+0x85c0/0x85c0 [ 1609.246785] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1609.247731] ? wait_for_completion_io+0x270/0x270 [ 1609.248698] ? rcu_read_lock_any_held+0x75/0xa0 [ 1609.249632] ? vfs_write+0x354/0xa70 [ 1609.250385] ? fput_many+0x2f/0x1a0 [ 1609.251116] ? ksys_write+0x1a9/0x260 [ 1609.251889] ? __ia32_sys_read+0xb0/0xb0 [ 1609.252723] do_syscall_64+0x33/0x40 [ 1609.253491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1609.254517] RIP: 0033:0x7f824c5c0b19 [ 1609.255279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.258949] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1609.260473] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1609.261908] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1609.263332] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.264752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1609.266178] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 [ 1609.267636] CPU: 1 PID: 9361 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1609.269043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1609.270707] Call Trace: [ 1609.271243] dump_stack+0x107/0x167 [ 1609.271982] should_fail.cold+0x5/0xa [ 1609.272754] ? create_object.isra.0+0x3a/0xa20 [ 1609.273687] should_failslab+0x5/0x20 [ 1609.274453] kmem_cache_alloc+0x5b/0x310 [ 1609.275272] ? mark_held_locks+0x9e/0xe0 [ 1609.276094] create_object.isra.0+0x3a/0xa20 [ 1609.276999] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1609.278028] kmem_cache_alloc_bulk+0x168/0x320 [ 1609.278954] io_submit_sqes+0x6f76/0x85c0 [ 1609.279795] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1609.280793] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1609.281806] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1609.282787] ? lock_downgrade+0x6d0/0x6d0 [ 1609.283620] ? find_held_lock+0x2c/0x110 [ 1609.284445] ? io_submit_sqes+0x85c0/0x85c0 [ 1609.285338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1609.286312] ? wait_for_completion_io+0x270/0x270 [ 1609.287283] ? rcu_read_lock_any_held+0x75/0xa0 [ 1609.288217] ? vfs_write+0x354/0xa70 [ 1609.288987] ? fput_many+0x2f/0x1a0 [ 1609.289728] ? ksys_write+0x1a9/0x260 [ 1609.290497] ? __ia32_sys_read+0xb0/0xb0 [ 1609.291342] do_syscall_64+0x33/0x40 [ 1609.292121] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1609.293178] RIP: 0033:0x7f818218db19 [ 1609.293931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.297755] RSP: 002b:00007f817f703188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1609.299305] RAX: ffffffffffffffda RBX: 00007f81822a0f60 RCX: 00007f818218db19 [ 1609.300762] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1609.302202] RBP: 00007f817f7031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.303638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.305083] R13: 00007ffd3418418f R14: 00007f817f703300 R15: 0000000000022000 20:12:13 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xffffffff) dup3(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) fsync(r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x12, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743"]}]}, 0x28}}, 0x0) 20:12:13 executing program 6: r0 = syz_io_uring_setup(0x72c9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:12:13 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 20:12:13 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:13 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1609.589512] FAULT_INJECTION: forcing a failure. [ 1609.589512] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.591922] CPU: 0 PID: 9372 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1609.593320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1609.595005] Call Trace: [ 1609.595550] dump_stack+0x107/0x167 [ 1609.596290] should_fail.cold+0x5/0xa [ 1609.597083] ? io_wq_create+0x6ef/0xc00 [ 1609.597903] should_failslab+0x5/0x20 [ 1609.598677] kmem_cache_alloc_node_trace+0x59/0x340 [ 1609.599704] io_wq_create+0x6ef/0xc00 [ 1609.600498] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1609.601555] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1609.602587] ? io_apoll_task_func+0x2d0/0x2d0 [ 1609.603501] ? __io_req_find_next+0x300/0x300 [ 1609.604425] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1609.605414] __io_uring_add_tctx_node+0x2c6/0x520 [ 1609.606385] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1609.607464] __do_sys_io_uring_enter+0x14de/0x1920 [ 1609.608468] ? lock_downgrade+0x6d0/0x6d0 [ 1609.609318] ? find_held_lock+0x2c/0x110 [ 1609.610145] ? io_submit_sqes+0x85c0/0x85c0 [ 1609.611031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1609.612025] ? wait_for_completion_io+0x270/0x270 [ 1609.613010] ? rcu_read_lock_any_held+0x75/0xa0 [ 1609.613948] ? vfs_write+0x354/0xa70 [ 1609.614711] ? fput_many+0x2f/0x1a0 [ 1609.615452] ? ksys_write+0x1a9/0x260 [ 1609.616225] ? __ia32_sys_read+0xb0/0xb0 [ 1609.617075] do_syscall_64+0x33/0x40 [ 1609.617828] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1609.618863] RIP: 0033:0x7f818218db19 [ 1609.619624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.623350] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1609.624890] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1609.626351] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1609.627796] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.629244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.630692] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:12:14 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendto$inet(r3, &(0x7f0000000300)="9f89087cc0cfa9abe9cd5dbada0895c6b7900f0c982e2e2fe9b97d8cbe63cf8738cf320aa9f0450f9b80a46652b33df5062fae61173c95596a5383cb8bbff177a78a77dc9ca239d155dd", 0x4a, 0x40040000, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @remote}, &(0x7f00000003c0)=0xc) syz_io_uring_setup(0x5c6c, &(0x7f0000000400)={0x0, 0x7948, 0x2, 0x0, 0x173, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/20, 0x14}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/49, 0x31}], 0x6, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1609.746683] FAULT_INJECTION: forcing a failure. [ 1609.746683] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.749374] CPU: 1 PID: 9380 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1609.750979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1609.752878] Call Trace: [ 1609.753443] dump_stack+0x107/0x167 [ 1609.754308] should_fail.cold+0x5/0xa [ 1609.755158] ? create_object.isra.0+0x3a/0xa20 [ 1609.756203] should_failslab+0x5/0x20 [ 1609.757135] kmem_cache_alloc+0x5b/0x310 [ 1609.757986] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1609.759192] create_object.isra.0+0x3a/0xa20 [ 1609.760198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1609.761316] __kmalloc+0x16e/0x390 [ 1609.762165] io_wq_create+0xeb/0xc00 [ 1609.762949] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1609.764145] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1609.765300] ? io_apoll_task_func+0x2d0/0x2d0 [ 1609.766345] ? __io_req_find_next+0x300/0x300 [ 1609.767426] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1609.768520] __io_uring_add_tctx_node+0x2c6/0x520 [ 1609.769579] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1609.770728] __do_sys_io_uring_enter+0x14de/0x1920 [ 1609.771868] ? lock_downgrade+0x6d0/0x6d0 [ 1609.772758] ? find_held_lock+0x2c/0x110 [ 1609.773685] ? io_submit_sqes+0x85c0/0x85c0 [ 1609.774726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1609.775786] ? wait_for_completion_io+0x270/0x270 [ 1609.776807] ? rcu_read_lock_any_held+0x75/0xa0 [ 1609.777798] ? vfs_write+0x354/0xa70 [ 1609.778654] ? fput_many+0x2f/0x1a0 [ 1609.779526] ? ksys_write+0x1a9/0x260 [ 1609.780352] ? __ia32_sys_read+0xb0/0xb0 [ 1609.781311] do_syscall_64+0x33/0x40 [ 1609.782159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1609.783340] RIP: 0033:0x7f9a776e8b19 [ 1609.784097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1609.788307] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1609.790047] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1609.791575] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1609.793206] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1609.794840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.796296] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:12:31 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 20:12:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, 0x0, &(0x7f00000016c0), 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:12:31 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 20:12:31 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d310) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:31 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:12:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20716c2a1b921bcd347e5b303f97c9847d522c097d726e2825c4c1b0af5e250c7e4589e4"]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 20:12:31 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 20:12:31 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = signalfd4(r4, &(0x7f0000000000)={[0x6e]}, 0x8, 0xc0000) r6 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x7fffffff, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000300)="f5df9184e8b0a9bc30b83a5f2174566f2c0c0e5825adbcaab82cd46048340d94dd73e7a848b4e755d3ce8bdd40684850a5a160a463077ef9142285c795b65b366837012e3df6dc7a805a8335d8893590cf5f0eaba45609ebb4e60757b4112b511a0fb2f5b2517947e45579c9fb4facf13e4fea3f6b14dca21f9030b79b2048df040e", 0x82}, {&(0x7f00000003c0)="e55ad9ba655dd3767275e76025da533c5c67466884cb1815f494fa83a40708d30dd53d19200874b32efa69ecd62e42bd384e4c2d1e63bebaa079e13ee5096c88037040c8b6bcd5f6527a956c869368340a4d137fd98d588331add5a0067dabad6d9fbc4ac04118a768729aa9acbdffecc42172ad2d5e6cb27239a2f1204cddfdfa0b2be638ec592f2598723bd4532d3f78b674a50991a9947496e5e90cd009fc0ec7299081d4a9e11c3e59319353705d508e5a86eb5116ae5f7b693929bf0f0820bbb4f6c49f15b3f5f564fdc42eabac8a04747be724b63435b1c1e9995c399915fd44ec0e7c7fd5e59a72e629", 0xed, 0x80000001}], 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB="754f13d17f06f2ec89c997b356a27466382c6368650000000000000002742c7362736563746f723d30783030303030303030303030303030304b2c636865636b3d72656c617c65642c6e6f6a6f6c6965742c666f776e65723de85dbbb1826fbe82d182d450cc071fac5d558719163e4c25bcadd1c0abaad728285a5a4f1750cc182e04c50223460648a18ce0c69a837f610af88de942b6c787ca3a80096ed3cfab227de8983e090bb668b0f31435f52fbd0234dc11f81a7b923d1d70364ced5b0926795108344518ec98d2218e4bec523a03", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000580)={0x40000015}) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1627.234562] FAULT_INJECTION: forcing a failure. [ 1627.234562] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.235985] CPU: 1 PID: 9407 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1627.236825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.237821] Call Trace: [ 1627.238121] dump_stack+0x107/0x167 [ 1627.238523] should_fail.cold+0x5/0xa [ 1627.238949] ? create_object.isra.0+0x3a/0xa20 [ 1627.239465] should_failslab+0x5/0x20 [ 1627.239898] kmem_cache_alloc+0x5b/0x310 [ 1627.240355] ? io_wq_create+0x114/0xc00 [ 1627.240802] create_object.isra.0+0x3a/0xa20 [ 1627.241301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1627.241860] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1627.242423] io_wq_create+0x6ef/0xc00 [ 1627.242856] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1627.243419] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1627.244002] ? io_apoll_task_func+0x2d0/0x2d0 [ 1627.244525] ? __io_req_find_next+0x300/0x300 [ 1627.245055] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1627.245628] __io_uring_add_tctx_node+0x2c6/0x520 [ 1627.246192] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1627.246790] __do_sys_io_uring_enter+0x14de/0x1920 [ 1627.247375] ? lock_downgrade+0x6d0/0x6d0 [ 1627.247843] ? find_held_lock+0x2c/0x110 [ 1627.248322] ? io_submit_sqes+0x85c0/0x85c0 [ 1627.248828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.249364] ? wait_for_completion_io+0x270/0x270 [ 1627.249921] ? rcu_read_lock_any_held+0x75/0xa0 [ 1627.250451] ? vfs_write+0x354/0xa70 [ 1627.250887] ? fput_many+0x2f/0x1a0 [ 1627.251301] ? ksys_write+0x1a9/0x260 [ 1627.251743] ? __ia32_sys_read+0xb0/0xb0 [ 1627.252231] do_syscall_64+0x33/0x40 [ 1627.252653] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1627.253263] RIP: 0033:0x7f818218db19 [ 1627.253693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.255803] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1627.256681] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1627.257502] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1627.258280] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.259101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.259924] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1627.262063] FAULT_INJECTION: forcing a failure. [ 1627.262063] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.263495] CPU: 1 PID: 9408 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1627.264270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.265217] Call Trace: [ 1627.265521] dump_stack+0x107/0x167 [ 1627.265943] should_fail.cold+0x5/0xa [ 1627.266380] ? xas_alloc+0x336/0x440 [ 1627.266809] should_failslab+0x5/0x20 [ 1627.267247] kmem_cache_alloc+0x5b/0x310 [ 1627.267713] ? stack_trace_consume_entry+0x160/0x160 [ 1627.268294] xas_alloc+0x336/0x440 [ 1627.268716] xas_create+0x34a/0x10d0 [ 1627.269144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1627.269744] xas_store+0x8c/0x1c40 [ 1627.270159] __xa_store+0x164/0x2d0 [ 1627.270576] ? xa_delete_node+0x280/0x280 [ 1627.271063] ? trace_hardirqs_on+0x5b/0x180 [ 1627.271565] xa_store+0x31/0x50 [ 1627.271945] __io_uring_add_tctx_node+0x1cf/0x520 [ 1627.272504] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1627.273110] __do_sys_io_uring_enter+0x14de/0x1920 [ 1627.273668] ? lock_downgrade+0x6d0/0x6d0 [ 1627.274142] ? find_held_lock+0x2c/0x110 [ 1627.274618] ? io_submit_sqes+0x85c0/0x85c0 [ 1627.275111] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.275664] ? wait_for_completion_io+0x270/0x270 [ 1627.276210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1627.276738] ? vfs_write+0x354/0xa70 [ 1627.277169] ? fput_many+0x2f/0x1a0 [ 1627.277587] ? ksys_write+0x1a9/0x260 [ 1627.278025] ? __ia32_sys_read+0xb0/0xb0 [ 1627.278497] do_syscall_64+0x33/0x40 [ 1627.278920] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1627.279500] RIP: 0033:0x7f824c5c0b19 [ 1627.279920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.282008] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1627.282867] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1627.283664] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1627.284470] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.285264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1627.286067] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 [ 1627.287802] FAULT_INJECTION: forcing a failure. [ 1627.287802] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.289048] CPU: 1 PID: 9411 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1627.289817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.290750] Call Trace: [ 1627.291042] dump_stack+0x107/0x167 [ 1627.291459] should_fail.cold+0x5/0xa [ 1627.291879] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1627.292446] should_failslab+0x5/0x20 [ 1627.292859] kmem_cache_alloc_trace+0x55/0x320 [ 1627.293388] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1627.293911] __io_uring_add_tctx_node+0x15c/0x520 [ 1627.294461] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1627.295037] __do_sys_io_uring_enter+0x14de/0x1920 [ 1627.295592] ? lock_downgrade+0x6d0/0x6d0 [ 1627.296035] ? find_held_lock+0x2c/0x110 [ 1627.296497] ? io_submit_sqes+0x85c0/0x85c0 [ 1627.296973] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.297521] ? wait_for_completion_io+0x270/0x270 [ 1627.298036] ? rcu_read_lock_any_held+0x75/0xa0 [ 1627.298558] ? vfs_write+0x354/0xa70 [ 1627.298979] ? fput_many+0x2f/0x1a0 [ 1627.299388] ? ksys_write+0x1a9/0x260 [ 1627.299814] ? __ia32_sys_read+0xb0/0xb0 [ 1627.300279] do_syscall_64+0x33/0x40 [ 1627.300701] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1627.301286] RIP: 0033:0x7f27221a7b19 [ 1627.301702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.303753] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1627.304598] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1627.305403] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1627.306193] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.306995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.307797] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:12:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000340)="17148c73933e8b57e1d697ff7ec9c9ab79434f08b5a1c41d96ad12b474b046e07c02283705fb06d5411f46a6bde5b5eab7f0b1776096c2eb1f2de69016b1b9bbae31fc1d9cd194479486d0f3be3178", 0x4f}], 0x2}, 0x81) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000300)=0x9, 0xfffffffffffffff9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000006d26274e0000000000000000000000000440000009000080999e00009c000000848fc1a6fb61f1f07c07c9620d54ac34b133e1a973c94b8093535d11e3ea9932118f19ca7d07e5587fd2f69d3f44cecc4b4a23fb0b20d8619c8d4d73d6cfc929afab1520531f0424aaafc8e876160b24780cd9ac52c91a1f6591ba2e5b49e31de6af7b66f3dd9367797ec89c41f782d9ffffa176ab63f6a69924fda4254a83536e54e71249a9c59204d9aaa56ea1dbed22ebff0000630000000059ff14ab2a8160f6a707000000000000001e174c64b5ad6427c679738f08ba600b00000000000035d263abc1d3fa23e7b9bfbbbfcc0bb6a3a4e66a"], 0x24}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/193, 0xc1}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r3, r2) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000600)={0x0, 0x80000001}) acct(0x0) unshare(0x48020200) [ 1627.380992] FAULT_INJECTION: forcing a failure. [ 1627.380992] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.382250] CPU: 1 PID: 9410 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1627.382997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.383865] Call Trace: [ 1627.384154] dump_stack+0x107/0x167 [ 1627.384542] should_fail.cold+0x5/0xa [ 1627.384958] ? io_wq_create+0x6ef/0xc00 [ 1627.385399] should_failslab+0x5/0x20 [ 1627.385803] kmem_cache_alloc_node_trace+0x59/0x340 [ 1627.386339] io_wq_create+0x6ef/0xc00 [ 1627.386748] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1627.387284] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1627.387812] ? io_apoll_task_func+0x2d0/0x2d0 [ 1627.388286] ? __io_req_find_next+0x300/0x300 [ 1627.388760] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1627.389299] __io_uring_add_tctx_node+0x2c6/0x520 [ 1627.389807] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1627.390394] __do_sys_io_uring_enter+0x14de/0x1920 [ 1627.390936] ? lock_downgrade+0x6d0/0x6d0 [ 1627.391393] ? find_held_lock+0x2c/0x110 [ 1627.391842] ? io_submit_sqes+0x85c0/0x85c0 [ 1627.392323] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1627.392851] ? wait_for_completion_io+0x270/0x270 [ 1627.393381] ? rcu_read_lock_any_held+0x75/0xa0 [ 1627.393885] ? vfs_write+0x354/0xa70 [ 1627.394294] ? fput_many+0x2f/0x1a0 [ 1627.394695] ? ksys_write+0x1a9/0x260 [ 1627.395115] ? __ia32_sys_read+0xb0/0xb0 [ 1627.395572] do_syscall_64+0x33/0x40 [ 1627.395979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1627.396543] RIP: 0033:0x7f9a776e8b19 [ 1627.396949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.398942] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1627.399761] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1627.400538] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1627.401325] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.402099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.402877] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:12:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, 0x0, &(0x7f00000016c0), 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:12:31 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000002a80)=ANY=[@ANYBLOB="1c100000410010002bbd7000ffdbdf2508000000e691596dd88f9f52ed7ea93a890f422f0d593e0aff016a22eba392b6cb63423e5b3036b499a8393886de0cccdc4b8e7ee65ca9117db98032d39f810a6b335f231e23d46f54195b8be8312442799493be7a626d529ab36b25319cd9c09e6c22acfe6258ea5da2564725cd77d67400b28e630e0557bcce8fe4e6eb88f521824f12b5b48e05eb087ed1c1733ea7458ecb62b6506a69e65f0c9a552095a1a2e3228d6286d226bea8f18fd82eb0798900e695fef7026812340a399897a8fc12de27ab8257d58be480ead8ebc07f76ba8db7b5b268d4c0d71a5b8f307a7aeac5582877e43fb040232c9605c84ea383763116bf767b3edc1b60a4241ed563cba9a60406eb7e1294235edaa5a048a506ee88e0a0b9143d06f8dd031b3a1234de6f3bd02bc96a93d71ffd4557306723689c66d628685334f4758bc43d052b6946f43b021211d4dc4afac3acb44e64fbfc7d232315020ba1e0dace7da5a5525c25d9044ce311d17b6765098de466cd59890e2b77d99bcea6875a9bd98962b35ad82688d2329455fb8e215381e687eb47680309df0bc437244d87bd8b53218e7a5d53a3e3537bcc8eb78fa30cdd5a00ca6dcacb3e7cdc79d69e3fecacb692fc74b7c12b8dc657997b82abc9fc9103d217b16be6aed2ceff406ec9ed8ba1419cb494acb0bd74b7e644e6b8f295eecd4eebb137b2b4329e5d90b8756844839e9a6f31cf628450c3f3c85173a7cbdd606975075064080ffe786786541611aecbe7de9a4b6866f5473a74a1ede203ecec9063f721fe123fd20c7ff8459543bf50d3c115252a49fdf6e61f053e13bd488a237494e1c0fdc1159dd87f70aa9f5544a15d8e7920180aa75c797a707a216b234e8de5341b33593d50db7a68d02b7888f88324ed506ad20ad2823f3094d35f686f7f3624b506b88e3d677848a186558509f5b39c622cfd2f98a77866e349748445d1f4f2e6615eb5e91f296bfbc93d7a33c169daed773cdf346334409634d1830ad3e9b874b9f0d55df137503bade27c8cc73834bbf863865d052b7647be4d157f43f922781274c422502b45c48cea0e63f08e95593f16b870844f6067f81db14f13f932b5f88248c65bdb857ee06375096588e577108b66d3034b063feffd6e4b5e9928031d185e1bfa4bbb49723467677b28504975f67f824da324db9b0b0df45737473beac07835c23b66e338dc1eedef1e3be5c7e93f2732fcdd4a4f409eeaa74b175ac0d11ee462725873955b7d582cfd210547fcc4d028fb77ae275ce0ab611f8ac379d2263ec7f7caf5d2d98bd1b5737227c8178d6b88613cf556d5b9800573d6c0782f09d1798147e388eec7e16aaaf83eca732f30508432f8df2f0ad3bdcf9551c6130a85bcbecf191f9784dee2f9718aa64e45d1eb128bd22134cec4f5ca4213c6bd9babaa8ce9029adfdb8fdd979c06cb8e4153d9dfcf51a1e7ebd8d0ba59d3d61c8f8f0ec43c0c1d8b1a2506d524c07b501cc34907a4810fe4368dbbd16e9349de8aa642cc3892e0309a22df0b49e677d5ffa201b33d51373f825318b3da057c1454103bc30c695f3aa57c26269acb8cadb3418636e231c1984594f43f8244f5c561a7ae8612eff81b287c84f2b47d4f070c938650545b6081ece0504dfb34451a0943c86d91ba6d7830a1c1864ad4c170b94643060b883d5cfcff6597346fe8ddb465eaf80bdc4a9b76170f7f93eeca1f8b834ce9fb694eac3c54c79ec62c9807c30baab8545e7167278ef7ab1fff23d0e58dc5ec53a3798706031407af7743358cad4a33b41227a63dc478912d6e11f6554224107032761f24ad84cf7dfe658077607d44da988f1b1bac42aaa8d110b651f3c44f5b70dea195ed0fbe49deb050ad0efb994251648c71fdc6ef8c67f7cf3b8fd2b813f6dff5b0de1c02835c5a3cf84fce4777ca3c45a373e1ae0d1a1b3584d95f9b2a04871089b97659db924ed4740f1c0cb4c39436a2ab1cdab692cf5b9965f2b5c501ed66678616acf5d195ad2206de4199c790c8e96808a197712bc49c57e7ed482cc67a6c87d908c2349439a57b82aae943645b49eb1ea17cfb592805e661c8435b1de9851d6227d954c0e903eef5a45d91c5cc056951e8a40d295cd7eb0722677cba511289ad826f98d24a0fad858fe1257c0458bc77872e778fd1a0140f86280ae7e02743384e51a59d1bc7cfc46bf4f8203d008f577d0d487194b0c8e5b03db9c79aefd97bd8fc6ee41a3b0db294687a07628078e78049f02cf6219820876c6385325166c808035325927be51cbcbbadd6bb858d75b9084eea9c90d22e9e9919b2271e732e3b82e437abc4939d9ca84890a1368f8e9a1957e26a98bd16c08ec4a7cac45d7c8b6eff715902db312b47a6328789469260936da7945024ba1c92d007131b021be3a6138580d4d71af357a7666bf793ae73d34ee2487b2bb264dbaadca9f03e2aa1e571c1bacfb46d74b73c774566091016a4285bcc7c893e4a00be12b1ac56b74c1de92733a0a05898dcd4f4ebf3d30ff75630088b9152b390171f827904be53acf6175544368b0d1a6373a65ef737c2cc3d1bc4299e13b8bfd543a55d92c72e1da9a54f34a05b813a0eae20ef28e6849bd71f3fcaa800f90537e2020e66957f96f88c25b9a46bccd59a930ac3f6c9f7f67715497ad49ff68cee32cdfb68095cf3b76ecf62fc0e1608362835ced3601ed60c929a889f89e2f90c86e9258f454ed879caa78f7894575812f25119c88a4c08f365cfade9d5944522269ce265a54915bcedaa9fe31f6b31e7ce15aa86fcb029fec2490959347345f8deb8f0256dec8a0521235657983766286fe17e540c18e034b5cd5b1fc2693376a4a3decc7cb606e83ad67dd35acbd7119086fc1ab5f74ebe48adc48a878ea1c5a34f6172ccdcd12ceb6aad0713fd9cd37c7bcb652360cfa8503f5b2b98535176805c2b7b5a5e9c20fd04c81794b716519a0fabc6e3afd22bd3022720a77de8b6c9ff3378d569f433aa6a4e772d90db2bb4e75bcade1cad0e875dc6ceb3f2f5df827431072e18489c1530104a990bea850e70cd8abf866a3b29037f2be2be54c2fec324a74f381a45f0add695511d4b7314e9699d76c697c8a5c1c928991cc3bc9824a27f9192505b18f74a93059150f3f8e2216fda5e5264a7893a7112bd044b9af6331db437320d356e0d9df7d01b8d8880ef80b30806e1e78cbc146d58c52ad03aa5dbd09886e0a50fd03651edb0d9a82c2c255edc497490cf27a28d775da718a3a1fe36999e6243c8829ca57ae5492c0f46f4203fb0200e33e5d9b978d847b0256b0990c44641690a0f0f980d0a8dedc6c2358c7102c57bc9815256deb7d4634cbc017d30ccbb5306a2c7793f5abcabb4f20788cdc0243c35fca12bbda8fbad2deb1a1d8a13c464cb9451dbce566886e06b68c9fa5664613ecf240259e02d2b6b0294b8dd300f8a5ea3dbac1ccc02e3edeb0b2cea103a85bb55d78f57542d76234ffe1c0dbe24ee5f6535f46eb656c65b1b6c76870a65a593cce989928082c0f34a2bccce16c0330a8649881af32d8068ca943c8b44c5a7be0d977ff0dda277ad0f35ce8c81d0897705516bc66bb77ce9022f28d98cebaf52f8a6cb970fd7758b92d16e7499371e2fb3460ebf5f2cbcc22a9eaf5f9860ab4d21b610ea73c4011c34b4e1ab44d243658a7e101fa048282e7a782271f8fb0fc42ad179cb83af30cc923fec925a3c9bf99ddb1d2def485a606671f8ccee1569179029551a05fd0b0c27bfe45af9ab8eea3c0f9fc791247679930e7aed336304bff72da52c44d6c5b15cc6c6661a5369295663dc19aa7b3cd632e6448b080312b27e4a5894d396021666c174201ebba5d43382676b820915d1ed2e1bca1c4681b52d1927e94e39caf8624985bf231f96b5a965f473188ff38d7e0ab136093fc3b3356807dcddf1f0a51019cd57d034727d535eb4cb64f18be14b86fb66552792539f9e6d2e8303dc1f6893c27935a5e3f9e5fe381b8a08b997fb6d30c0d840c159a1c503120af922f0e0dfd5e26ccecfb9ea19872b78fc44f19de8bce78c2c5e0079f8d7d64a7082ce0a4a11a8519d0ae0fb7cbf29a52cdc5cf1590fbe7d60f01b3507ea0cc39b2a537bd507ecfb5e9d0b972e32ddebb435a43b63310c520148fe947a08df74c3f687770f414ae18323d3c02f9c6e13cf8f3aafb9329c88e7e838c92b961dea7bad4194ed0dc7f8d7af1611465b09b47af78ab3517e4af51eee8f34455bf0a1765e401066303700ec0bb92e8f8012160609e77d52d41936602c44db24845e65dae0bed5a143fbf62236e8e246949d668ee185d4dfc0dfdcb03c04dd9255f0c754e3b608f9da14dbe06894ba8b4386f888930c2485495ef78bdf1bcddeda39b0e36f91b89e4afc03c2c73b46800c4a47a229e0f7408b61ec841c6a1aa7138cdc506a0964ceefaa54266c743db816a36351e5bf428ec65985fe33249d9400f00386c613cf011ab76e2e6065b56d2519bf09a9eab2a792ca16990dfca3f8da7fffa2c42018ff654e4006e2f34266be6d6af2d41628bf3870c45aa594cbbc3e6198e5485bbe5feafe2fc7d37b9206c68fbbc699da30dc476e2e6ad07b0526af739adecf1190b05d8b72b4024988e0d3452db01526d134dcaaca0f66f8ec91933f0943ac352b54178676fd27925f2f8daeb4c8b6fa6850dd1a2ddc67c1f0e558461bb1e776586ae1d7459d255d2398372a234abc4e39110eac020afb32b0010cf9b411b07d5b5d5041c141119e3fec74901615d8e2a94791d87a0e74fd448543bf7fb0a906bde93131720651743b4f1990e03b04356e565ad0f5db22d2c9654a694201bf1442456ae5c219c1ac594278fad601bee29dd7bab1b2db5e203ef52e7fba840dbcf5acca82aaf66ff06871c7936a192af098144456eb28c2ca7f6fc5bfe762c9ab619842067a0f6b4ee569c61f5c15a47200eb3b46f020e309827c128a2ae51a14b038c843cccb7567aa37049b27cf830b75c1bcb08cbab297c491bf480923388c35137ebe2dede2272789ffa70f997e5bef5ef19f6d5e35f1bdf54d782a61094ae77618d6f1dcf378084cef0cc0133c9ac7d7b5d7f5342d5aa27e89d8a0818accb469490f980dc329c130142300bdf82ecf2f7787a2ee85edc2c34ada6af7d4ad83ed4287fbb0f65643d922aa4e61367ee57dc80de2af0b2f06913fe1e5c3f10d2f496b36b05d6fdd5d0deb42f2d50ee4998ca46271a1348e8b347b28de46927780e8d3be737a17a4a14a407622e46404fd00000000000700007bfda4e4d5228fbe87be997c579d008296122810cc220b3928f2c705ae3308e2e65ac9a5232874731ba3aa7451859876a896d193d4d0ccbc4202dfdddac7185f84b7043eebf09b0bda0ffdb66fadf5fd82fe293bde3a604c6d834318d381aee366ea988d57f53dbbda5d206640dac7f78485083ec33c3a272fe44741c258f89fb8c089ea9024cc4b2562278bf87db53a76c4b789b5a75b009114131eff06afba55701e67acf22482e6b5ed84ca81e41d5072ffa221f13dfe610770646372e73b9b203d5b35d78fe8c7540eab080c2ec83dbb622ba1112a1f3df66e40ab8f1fde6a069f54a2536942eace65a3833f737a00c4923eb6283cbe12c14dcde7775c29e50ac027ccea22ee2eb280be583b9cd9b10cdddfe90b91e51958b3749e2a6665cdff542acfe06451a40eb5e1c65a8d4b5be130cb6405c64b2ecc5686d372c38da4285156a191c57887c5add54dca308a2618221d68db88af5030fa26793a2d64c241e68c05080032007f000001"], 0x101c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000013c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x8, 0xffff, 0x0, 0x7, 0x2, 0x1, {0x0, r6}}, 0x7) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x11c0, 0xe43, 0x3, &(0x7f0000001380)={[0x8000]}, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:12:31 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d311) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:31 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f0000000200)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="ff01c8470000220018d81d00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00./file1\x00']) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x1010, r5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x87) 20:12:32 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d314) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77e6646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 20:12:32 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) io_uring_enter(r7, 0x2cb5, 0xa4bc, 0x2, &(0x7f0000000000)={[0x80000000]}, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1627.788939] 9pnet: Insufficient options for proto=fd [ 1627.796847] 9pnet: Insufficient options for proto=fd 20:12:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:12:47 executing program 6: r0 = syz_io_uring_setup(0x20021, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000000)=0x68) 20:12:47 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 20:12:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, 0x0, &(0x7f00000016c0), 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:12:47 executing program 1: pidfd_send_signal(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x50802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x80, 0x40, 0x9, 0x0, 0x1, 0x22, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x240, 0xfffffffffffffffe, 0xb4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x6, 0x0, 0x3cec}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x4, 0x4, 0x9d, 0x0, 0x2, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x0, 0x9}, 0x20, 0x100, 0x81, 0x9, 0x5, 0x40, 0xe98f, 0x0, 0x10001, 0x0, 0x300000000}, r2, 0xe, r0, 0x6) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) unshare(0x48020200) 20:12:47 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d316) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:12:47 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 20:12:47 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1643.456711] FAULT_INJECTION: forcing a failure. [ 1643.456711] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.459242] CPU: 0 PID: 9468 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1643.460538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.462273] Call Trace: [ 1643.462749] dump_stack+0x107/0x167 [ 1643.463507] should_fail.cold+0x5/0xa [ 1643.464294] ? create_object.isra.0+0x3a/0xa20 [ 1643.465089] should_failslab+0x5/0x20 [ 1643.465909] kmem_cache_alloc+0x5b/0x310 [ 1643.466618] create_object.isra.0+0x3a/0xa20 [ 1643.467526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1643.468412] kmem_cache_alloc_trace+0x151/0x320 [ 1643.469390] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1643.470390] __io_uring_add_tctx_node+0x15c/0x520 [ 1643.471225] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1643.472318] __do_sys_io_uring_enter+0x14de/0x1920 [ 1643.473176] ? lock_downgrade+0x6d0/0x6d0 [ 1643.474037] ? find_held_lock+0x2c/0x110 [ 1643.474750] ? io_submit_sqes+0x85c0/0x85c0 [ 1643.475510] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.476338] ? wait_for_completion_io+0x270/0x270 [ 1643.477190] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.478069] ? vfs_write+0x354/0xa70 [ 1643.478770] ? fput_many+0x2f/0x1a0 [ 1643.479446] ? ksys_write+0x1a9/0x260 [ 1643.480150] ? __ia32_sys_read+0xb0/0xb0 [ 1643.480923] do_syscall_64+0x33/0x40 [ 1643.481623] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1643.482567] RIP: 0033:0x7f27221a7b19 [ 1643.483258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.483412] FAULT_INJECTION: forcing a failure. [ 1643.483412] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.486691] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.486712] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1643.486732] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1643.492957] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.494275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.495590] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1643.496936] CPU: 1 PID: 9470 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1643.498344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.500021] Call Trace: [ 1643.500561] dump_stack+0x107/0x167 [ 1643.501300] should_fail.cold+0x5/0xa [ 1643.502086] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1643.503091] should_failslab+0x5/0x20 [ 1643.503865] kmem_cache_alloc_trace+0x55/0x320 [ 1643.504782] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1643.505765] __io_uring_add_tctx_node+0x15c/0x520 [ 1643.506737] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1643.507810] __do_sys_io_uring_enter+0x14de/0x1920 [ 1643.508801] ? lock_downgrade+0x6d0/0x6d0 [ 1643.509657] ? find_held_lock+0x2c/0x110 [ 1643.510479] ? io_submit_sqes+0x85c0/0x85c0 [ 1643.511353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.512322] ? wait_for_completion_io+0x270/0x270 [ 1643.513292] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.514227] ? vfs_write+0x354/0xa70 [ 1643.514980] ? fput_many+0x2f/0x1a0 [ 1643.515711] ? ksys_write+0x1a9/0x260 [ 1643.516476] ? __ia32_sys_read+0xb0/0xb0 [ 1643.517306] do_syscall_64+0x33/0x40 [ 1643.518077] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1643.519104] RIP: 0033:0x7f818218db19 [ 1643.519853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.523550] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.525101] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1643.526540] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1643.527985] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.529432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.530869] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1643.535114] FAULT_INJECTION: forcing a failure. [ 1643.535114] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.537212] CPU: 0 PID: 9469 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1643.538467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.539833] Call Trace: [ 1643.540279] dump_stack+0x107/0x167 [ 1643.540892] should_fail.cold+0x5/0xa [ 1643.541534] ? create_object.isra.0+0x3a/0xa20 [ 1643.542290] should_failslab+0x5/0x20 [ 1643.542922] kmem_cache_alloc+0x5b/0x310 [ 1643.543612] create_object.isra.0+0x3a/0xa20 [ 1643.544338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1643.545180] kmem_cache_alloc+0x159/0x310 [ 1643.545879] xas_alloc+0x336/0x440 [ 1643.546471] xas_create+0x34a/0x10d0 [ 1643.547101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1643.547968] xas_store+0x8c/0x1c40 [ 1643.548569] __xa_store+0x164/0x2d0 [ 1643.549171] ? xa_delete_node+0x280/0x280 [ 1643.549879] ? trace_hardirqs_on+0x5b/0x180 [ 1643.550600] xa_store+0x31/0x50 [ 1643.551148] __io_uring_add_tctx_node+0x1cf/0x520 [ 1643.551939] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1643.552811] __do_sys_io_uring_enter+0x14de/0x1920 [ 1643.553641] ? lock_downgrade+0x6d0/0x6d0 [ 1643.554326] ? find_held_lock+0x2c/0x110 [ 1643.555003] ? io_submit_sqes+0x85c0/0x85c0 [ 1643.555715] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.556508] ? wait_for_completion_io+0x270/0x270 [ 1643.557291] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.558064] ? vfs_write+0x354/0xa70 [ 1643.558677] ? fput_many+0x2f/0x1a0 [ 1643.559270] ? ksys_write+0x1a9/0x260 [ 1643.559893] ? __ia32_sys_read+0xb0/0xb0 [ 1643.560567] do_syscall_64+0x33/0x40 [ 1643.561177] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1643.562026] RIP: 0033:0x7f824c5c0b19 [ 1643.562637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.565633] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.566868] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1643.568029] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1643.569189] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.570354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.571514] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 20:12:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000200)={0x6, @local, 0x4e20, 0x4, 'lblc\x00', 0x9, 0x80000000, 0xc}, 0x2c) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) [ 1643.586464] FAULT_INJECTION: forcing a failure. [ 1643.586464] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.588869] CPU: 0 PID: 9473 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1643.590199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.591525] Call Trace: [ 1643.592036] dump_stack+0x107/0x167 [ 1643.592639] should_fail.cold+0x5/0xa [ 1643.593372] ? create_object.isra.0+0x3a/0xa20 [ 1643.594113] ? create_object.isra.0+0x3a/0xa20 [ 1643.594987] should_failslab+0x5/0x20 [ 1643.595606] kmem_cache_alloc+0x5b/0x310 [ 1643.596385] ? io_wq_create+0x114/0xc00 [ 1643.597043] create_object.isra.0+0x3a/0xa20 [ 1643.597845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1643.598675] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1643.599620] io_wq_create+0x6ef/0xc00 [ 1643.600255] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1643.601077] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1643.601897] ? io_apoll_task_func+0x2d0/0x2d0 [ 1643.602616] ? __io_req_find_next+0x300/0x300 [ 1643.603334] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1643.604118] __io_uring_add_tctx_node+0x2c6/0x520 [ 1643.604862] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1643.605727] __do_sys_io_uring_enter+0x14de/0x1920 [ 1643.606485] ? lock_downgrade+0x6d0/0x6d0 [ 1643.607145] ? find_held_lock+0x2c/0x110 [ 1643.607894] ? io_submit_sqes+0x85c0/0x85c0 [ 1643.608718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.609644] ? wait_for_completion_io+0x270/0x270 [ 1643.610558] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.611426] ? vfs_write+0x354/0xa70 [ 1643.612134] ? fput_many+0x2f/0x1a0 [ 1643.612816] ? ksys_write+0x1a9/0x260 [ 1643.613543] ? __ia32_sys_read+0xb0/0xb0 [ 1643.614330] do_syscall_64+0x33/0x40 [ 1643.615029] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1643.615981] RIP: 0033:0x7f9a776e8b19 [ 1643.616630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.619465] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.620675] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1643.621779] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1643.622944] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.624131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.625191] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:12:48 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0xffffffff000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 20:13:02 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 20:13:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = syz_open_pts(0xffffffffffffffff, 0x4100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) 20:13:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, 0x0, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:02 executing program 2: r0 = syz_io_uring_setup(0x2025, &(0x7f0000000080)={0x0, 0x11fffff, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 1657.888454] FAULT_INJECTION: forcing a failure. [ 1657.888454] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.891015] CPU: 0 PID: 9506 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1657.892537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.894285] Call Trace: [ 1657.894839] dump_stack+0x107/0x167 [ 1657.895608] should_fail.cold+0x5/0xa [ 1657.896394] ? xas_alloc+0x336/0x440 [ 1657.897174] should_failslab+0x5/0x20 [ 1657.898002] kmem_cache_alloc+0x5b/0x310 [ 1657.898887] ? stack_trace_consume_entry+0x160/0x160 [ 1657.899946] xas_alloc+0x336/0x440 [ 1657.900693] xas_create+0x34a/0x10d0 [ 1657.901488] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1657.902608] xas_store+0x8c/0x1c40 [ 1657.903372] __xa_store+0x164/0x2d0 [ 1657.904139] ? xa_delete_node+0x280/0x280 [ 1657.905014] ? trace_hardirqs_on+0x5b/0x180 [ 1657.905941] xa_store+0x31/0x50 [ 1657.906632] __io_uring_add_tctx_node+0x1cf/0x520 [ 1657.907627] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1657.908739] __do_sys_io_uring_enter+0x14de/0x1920 [ 1657.909792] ? lock_downgrade+0x6d0/0x6d0 [ 1657.910655] ? find_held_lock+0x2c/0x110 [ 1657.911539] ? io_submit_sqes+0x85c0/0x85c0 [ 1657.912445] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1657.913461] ? wait_for_completion_io+0x270/0x270 [ 1657.914493] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.915461] ? vfs_write+0x354/0xa70 [ 1657.916243] ? fput_many+0x2f/0x1a0 [ 1657.917009] ? ksys_write+0x1a9/0x260 [ 1657.917822] ? __ia32_sys_read+0xb0/0xb0 [ 1657.918692] do_syscall_64+0x33/0x40 [ 1657.919481] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1657.920539] RIP: 0033:0x7f27221a7b19 [ 1657.921326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.925138] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1657.926730] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1657.928208] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1657.929705] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.931181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.932663] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1657.942221] FAULT_INJECTION: forcing a failure. [ 1657.942221] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.944659] CPU: 0 PID: 9509 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1657.946162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.947901] Call Trace: [ 1657.948445] dump_stack+0x107/0x167 [ 1657.949199] should_fail.cold+0x5/0xa [ 1657.950009] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1657.951040] should_failslab+0x5/0x20 [ 1657.951818] kmem_cache_alloc_trace+0x55/0x320 [ 1657.952777] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1657.953794] __io_uring_add_tctx_node+0x15c/0x520 [ 1657.954794] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1657.955902] __do_sys_io_uring_enter+0x14de/0x1920 [ 1657.956931] ? lock_downgrade+0x6d0/0x6d0 [ 1657.957832] ? find_held_lock+0x2c/0x110 [ 1657.958678] ? io_submit_sqes+0x85c0/0x85c0 [ 1657.959632] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1657.960630] ? wait_for_completion_io+0x270/0x270 [ 1657.961685] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.962639] ? vfs_write+0x354/0xa70 [ 1657.963433] ? fput_many+0x2f/0x1a0 [ 1657.964182] ? ksys_write+0x1a9/0x260 [ 1657.964982] ? __ia32_sys_read+0xb0/0xb0 [ 1657.965847] do_syscall_64+0x33/0x40 [ 1657.966634] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1657.967703] RIP: 0033:0x7f818218db19 [ 1657.968484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.972335] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1657.973910] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1657.975386] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1657.976846] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.978323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.979789] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1657.993087] FAULT_INJECTION: forcing a failure. [ 1657.993087] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.994424] CPU: 1 PID: 9510 Comm: syz-executor.0 Not tainted 5.10.197 #1 [ 1657.995188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.996110] Call Trace: [ 1657.996422] dump_stack+0x107/0x167 [ 1657.996840] should_fail.cold+0x5/0xa [ 1657.997267] ? xas_alloc+0x336/0x440 [ 1657.997700] should_failslab+0x5/0x20 [ 1657.998136] kmem_cache_alloc+0x5b/0x310 [ 1657.998595] xas_alloc+0x336/0x440 [ 1657.998994] xas_create+0x34a/0x10d0 [ 1657.999441] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.000032] xas_store+0x8c/0x1c40 [ 1658.000455] __xa_store+0x164/0x2d0 [ 1658.000874] ? xa_delete_node+0x280/0x280 [ 1658.001354] ? trace_hardirqs_on+0x5b/0x180 [ 1658.001868] xa_store+0x31/0x50 [ 1658.002254] __io_uring_add_tctx_node+0x1cf/0x520 [ 1658.002811] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1658.003436] __do_sys_io_uring_enter+0x14de/0x1920 [ 1658.004011] ? lock_downgrade+0x6d0/0x6d0 [ 1658.004496] ? find_held_lock+0x2c/0x110 [ 1658.004978] ? io_submit_sqes+0x85c0/0x85c0 [ 1658.005494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.006064] ? wait_for_completion_io+0x270/0x270 [ 1658.006640] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.007179] ? vfs_write+0x354/0xa70 [ 1658.007620] ? fput_many+0x2f/0x1a0 [ 1658.008045] ? ksys_write+0x1a9/0x260 [ 1658.008500] ? __ia32_sys_read+0xb0/0xb0 [ 1658.008984] do_syscall_64+0x33/0x40 [ 1658.009416] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.010013] RIP: 0033:0x7f824c5c0b19 [ 1658.010449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.012585] RSP: 002b:00007f8249b15188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.013476] RAX: ffffffffffffffda RBX: 00007f824c6d4020 RCX: 00007f824c5c0b19 [ 1658.014319] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1658.015142] RBP: 00007f8249b151d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.015975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.016807] R13: 00007ffd8bf921bf R14: 00007f8249b15300 R15: 0000000000022000 20:13:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x135181, 0x9) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:02 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000100)={{r1}, "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"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x3, 0x5, 0x3, 0x3}}) openat$null(0xffffffffffffff9c, &(0x7f0000001100), 0x563481, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x40045402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x2, 0xfffffffb, 0x0, 0x3ff}}) [ 1658.079078] FAULT_INJECTION: forcing a failure. [ 1658.079078] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.080412] CPU: 1 PID: 9511 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1658.081165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.082121] Call Trace: [ 1658.082423] dump_stack+0x107/0x167 [ 1658.082836] should_fail.cold+0x5/0xa [ 1658.083268] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1658.083829] should_failslab+0x5/0x20 [ 1658.084255] kmem_cache_alloc_trace+0x55/0x320 [ 1658.084767] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1658.085306] __io_uring_add_tctx_node+0x15c/0x520 [ 1658.085835] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1658.086440] __do_sys_io_uring_enter+0x14de/0x1920 [ 1658.086986] ? lock_downgrade+0x6d0/0x6d0 [ 1658.087456] ? find_held_lock+0x2c/0x110 [ 1658.087921] ? io_submit_sqes+0x85c0/0x85c0 [ 1658.088413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.088935] ? wait_for_completion_io+0x270/0x270 [ 1658.089479] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.090009] ? vfs_write+0x354/0xa70 [ 1658.090431] ? fput_many+0x2f/0x1a0 [ 1658.090820] ? ksys_write+0x1a9/0x260 [ 1658.091254] ? __ia32_sys_read+0xb0/0xb0 [ 1658.091701] do_syscall_64+0x33/0x40 [ 1658.092128] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.092683] RIP: 0033:0x7f9a776e8b19 [ 1658.093107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.095068] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.095919] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1658.096708] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1658.097501] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.098318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.099111] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, 0x0, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x80010, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r3}}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x440400, 0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000200)={0x7, 'hsr0\x00', {0x6}, 0x1000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) syz_open_dev$vcsa(&(0x7f0000000300), 0x40, 0x40) 20:13:02 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xbcb1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x35, 0x0, "f7ed0d629d64522f88a305446549af7f3cafa4e7817ae159de7beb88481c40f08e45caa17d62bef7d8f0ddf34af3b239e45322d2848a54f4b45dd5526c09c94abdda29b05ebfca377dba4f2fa8e820eb"}, 0xd8) sendfile(r4, r6, 0x0, 0x20d315) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r5, 0x0) fcntl$getown(r0, 0x9) syz_io_uring_submit(r10, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:02 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x5251c2, 0xc1) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) io_uring_enter(r6, 0x6226, 0x4fea, 0x1, &(0x7f0000000200)={[0x12f80a83]}, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80800) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x20010, r4, 0x8000000) syz_io_uring_setup(0x5f14, &(0x7f0000000300)={0x0, 0x26af, 0x20, 0x1, 0x201, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r5}, 0x2) [ 1658.609619] FAULT_INJECTION: forcing a failure. [ 1658.609619] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.611034] CPU: 1 PID: 9537 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1658.611900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.612805] Call Trace: [ 1658.613097] dump_stack+0x107/0x167 [ 1658.613497] should_fail.cold+0x5/0xa [ 1658.613920] ? create_object.isra.0+0x3a/0xa20 [ 1658.614417] should_failslab+0x5/0x20 [ 1658.614822] kmem_cache_alloc+0x5b/0x310 [ 1658.615260] create_object.isra.0+0x3a/0xa20 [ 1658.615743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.616398] kmem_cache_alloc_trace+0x151/0x320 [ 1658.616965] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1658.617630] __io_uring_add_tctx_node+0x15c/0x520 [ 1658.618145] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1658.618820] __do_sys_io_uring_enter+0x14de/0x1920 [ 1658.619357] ? lock_downgrade+0x6d0/0x6d0 [ 1658.619810] ? find_held_lock+0x2c/0x110 [ 1658.620249] ? io_submit_sqes+0x85c0/0x85c0 [ 1658.620718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.621234] ? wait_for_completion_io+0x270/0x270 [ 1658.621764] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.622257] ? vfs_write+0x354/0xa70 [ 1658.622654] ? fput_many+0x2f/0x1a0 [ 1658.623154] ? ksys_write+0x1a9/0x260 [ 1658.623580] ? __ia32_sys_read+0xb0/0xb0 [ 1658.624031] do_syscall_64+0x33/0x40 [ 1658.624439] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.625005] RIP: 0033:0x7f9a776e8b19 [ 1658.625410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.627365] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.628167] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1658.628920] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1658.629695] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.630448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.631208] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffffb}}, './file1\x00'}) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@ethernet={0x1, @random="7f5a5f2f868d"}}, 0x2f) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0xac7, 0x9675, 0xa13c, 0x4, 0x3}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:03 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:13:03 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 20:13:03 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1658.835570] FAULT_INJECTION: forcing a failure. [ 1658.835570] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.838109] CPU: 0 PID: 9552 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1658.839573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.841255] Call Trace: [ 1658.841819] dump_stack+0x107/0x167 [ 1658.842563] should_fail.cold+0x5/0xa [ 1658.843340] ? xas_alloc+0x336/0x440 [ 1658.844110] should_failslab+0x5/0x20 [ 1658.844885] kmem_cache_alloc+0x5b/0x310 [ 1658.845739] ? stack_trace_consume_entry+0x160/0x160 [ 1658.846769] xas_alloc+0x336/0x440 [ 1658.847495] xas_create+0x34a/0x10d0 [ 1658.848265] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.849328] xas_store+0x8c/0x1c40 [ 1658.850078] __xa_store+0x164/0x2d0 [ 1658.850819] ? xa_delete_node+0x280/0x280 [ 1658.851670] ? trace_hardirqs_on+0x5b/0x180 [ 1658.852556] xa_store+0x31/0x50 [ 1658.853229] __io_uring_add_tctx_node+0x1cf/0x520 [ 1658.854219] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1658.855296] __do_sys_io_uring_enter+0x14de/0x1920 [ 1658.856296] ? lock_downgrade+0x6d0/0x6d0 [ 1658.857139] ? find_held_lock+0x2c/0x110 [ 1658.857997] ? io_submit_sqes+0x85c0/0x85c0 [ 1658.858890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.859875] ? wait_for_completion_io+0x270/0x270 [ 1658.860855] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.861808] ? vfs_write+0x354/0xa70 [ 1658.862570] ? fput_many+0x2f/0x1a0 [ 1658.863308] ? ksys_write+0x1a9/0x260 [ 1658.864081] ? __ia32_sys_read+0xb0/0xb0 [ 1658.864919] do_syscall_64+0x33/0x40 [ 1658.865693] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.866734] RIP: 0033:0x7f818218db19 [ 1658.867496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.871232] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.872772] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1658.874232] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1658.875676] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.877124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.878590] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1658.886888] FAULT_INJECTION: forcing a failure. [ 1658.886888] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.889296] CPU: 0 PID: 9556 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1658.890770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.892449] Call Trace: [ 1658.892985] dump_stack+0x107/0x167 [ 1658.893756] should_fail.cold+0x5/0xa [ 1658.894539] ? create_object.isra.0+0x3a/0xa20 [ 1658.895466] should_failslab+0x5/0x20 [ 1658.896241] kmem_cache_alloc+0x5b/0x310 [ 1658.897074] create_object.isra.0+0x3a/0xa20 [ 1658.897989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.899032] kmem_cache_alloc+0x159/0x310 [ 1658.899880] xas_alloc+0x336/0x440 [ 1658.900605] xas_create+0x34a/0x10d0 [ 1658.901378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.902466] xas_store+0x8c/0x1c40 [ 1658.903207] __xa_store+0x164/0x2d0 [ 1658.903950] ? xa_delete_node+0x280/0x280 [ 1658.904801] ? trace_hardirqs_on+0x5b/0x180 [ 1658.905712] xa_store+0x31/0x50 [ 1658.906385] __io_uring_add_tctx_node+0x1cf/0x520 [ 1658.907366] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1658.908461] __do_sys_io_uring_enter+0x14de/0x1920 [ 1658.909465] ? lock_downgrade+0x6d0/0x6d0 [ 1658.910313] ? find_held_lock+0x2c/0x110 [ 1658.911145] ? io_submit_sqes+0x85c0/0x85c0 [ 1658.912031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.913015] ? wait_for_completion_io+0x270/0x270 [ 1658.914005] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.914950] ? vfs_write+0x354/0xa70 [ 1658.915716] ? fput_many+0x2f/0x1a0 [ 1658.916469] ? ksys_write+0x1a9/0x260 [ 1658.917251] ? __ia32_sys_read+0xb0/0xb0 [ 1658.918116] do_syscall_64+0x33/0x40 [ 1658.918879] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1658.919933] RIP: 0033:0x7f27221a7b19 [ 1658.920691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.924461] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.926028] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1658.927476] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1658.928924] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.930376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.931820] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:13:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r6 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x1, 0xe8, 0xf9, 0x3, 0x0, 0x800, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x8000, 0x0, 0x0, 0x3, 0x7, 0x8, 0xd6, 0x0, 0x0, 0x0, 0x77}, r3, 0xb, r3, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) 20:13:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x24}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "021c9603ec53f05fbd2ab48a4e675725d467c6e4c7c988e1"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c376ce0690d99ce33402952d3872a807acb86e294c7f8ab"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r1, 0x10, 0x8, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x36}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000090}, 0x20048084) sendmsg(r3, &(0x7f0000000900)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)="20473a551712d8092dd2fec000cf681b7c0ecf9b08dea99ba48acfeb52a7b3d38b33168d58224ad288637dc482d97f3508bebcc6dd9d14d023041cb612b7da8e8cc566edc1224dcf4ca5d928192f126c15f4a6e3843e6e4b1660e836deed42ea4f74e9070413b1c945c6500ec8710e8a44f48f915212b1763f73a86821b2804ffa743bedfc37dbd17091c590a86ac04086461a13a812", 0x96}, {&(0x7f0000000500)="ba8cc631c454d060f066066ee4f0732e6c3c", 0x12}, {&(0x7f0000000540)="cf4608021a56652de9aa022b10237b454d85c4125db678b520efdc031d9e5ae2275acae17596ec28ce6c7784da9db45bea4f8647b780d30c36226cf839050dae0fa71ff4e32c3e600088e5583fcec54055f3ab53d93a02", 0x57}, {&(0x7f00000005c0)="ab9cdd12781a8a63864f8c642158eae122c868b36463b1e444c0ca4dddc1228eb421486a60d542085962c5a0e526b2aa2a99", 0x32}, {&(0x7f0000000600)="79fe41f9ec3929c128d446590f6c79ee7e97439c26939a2eeb752156772653f39f12a6330d9f708a", 0x28}, {&(0x7f0000000640)="73ba8f6ec69ca8b1809991b637de954a4953d710add5b2781881c7854bb85ae4f2f6721ec1998838976422f7a5ace46d41f3c1f09071f5", 0x37}, {&(0x7f0000000680)="5232dc026b8b3fd7c2906db5dfc249ee253820b388202018d9548c0857c9c95c93e170f3282a34de36f05772d552e42ec62fae1ff0cc3050c90b9e87f6aea803622a96b1f3", 0x45}, {&(0x7f0000000700)="254ebb1a25e72fe9355448413973c080524ccd6072f00d7995e071b8982f01f9c045bc0f716756459f6dfaef00c74b5da3cfda16bab64dcdd45d0eb869a8d7f7b33abc792c2beba845313eadae36c66eb662aef9eb11275cf3ba20c43e2f34badee275967ce432bfa881990afe1af536fbbbcacc14b78ad67caaad07f5a3f4543726235cbb8fb403a9a84e348b8cc243a5e1167a7033e49627ead982b01eaec71759e92d0bba37d448a42360887ee80eac84d59b2815fdfd52e41af37b31131b1bda20a3dd0acfa928d7704b4d81ec270ea07eafa0", 0xd5}, {&(0x7f0000000800)="f62a4bd17ccde67026a1c69a929cbd59ede6f42169679ddc4757a2d8c1d0c7201bc2678af1605df6e072765fc77cf5c3160b3d", 0x33}], 0x9}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x48}}, 0xc814) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xb8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e40)=@IORING_OP_CONNECT={0x10, 0x323220f3f52a5c8, 0x0, r0, 0x80, &(0x7f0000000dc0)=@can}, 0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x180, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x16c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4e4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffc01}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8032}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5fea}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa349}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x6011}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001100)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000001200)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000001540)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001240)={0x284, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@typed={0x8, 0x5a, 0x0, 0x0, @u32=0x5}, @generic="26b1957947db7e2413858576b2131c07f720aaab1d31ebbffbf390a168d7dda72ff37d9983333ff9be0fe6b6717d9d7a5645cd12093d284ccae14f391e104c2baf1687c30cde22e353430eb262ee7932db338f63f6d2e304a450eaa8fc5ce65090f88737a4072147a8bb10566c6085db831448e9fbc629e715307b55c55eed1cd1aa99331a551e06ca406df20e6e1eecdde5f55d1337aa375df593abcc3d8ed40c38d06efe054c4869aa1462263b091e8a787d797f462a08dff8d79b8268059b94dcf6ddcd015a872306fea0d3d15cacf1c24951223d8eda2152", @generic="7af03ea4581b93f384405667865478276165946af7ee1849b6214104c6441b00682386", @nested={0x93, 0x8d, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0xb2}, @generic="e9a4f34624f889a48f4728606f0cdca7ae551ff881cc5bbd62233c288664e2334d37d6bcea854b114685de11b0b121bc0a2665a1d93ad64f85e039eaa4668e7150871a0f0040963712808eb796dd0eda4b9a11", @typed={0x8, 0x5e, 0x0, 0x0, @uid=r7}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0xc, 0x96, 0x0, 0x0, @str='nl80211\x00'}, @generic="5ab6ba7379142d45f182b189"]}, @typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xca, 0x6a, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}, @generic="19dbc4c2300fe8f4fdaa3a0119ddb28a57d690021a29cae0db48ad2e7c3f7260f79ffd4e64f270b996e5e833205b677f932af480b2b3679713fc481784520f5b4514fa6df15e87e5159ab693c7723ef0d496efd5f9de0a845616d59da9728774f297fce3bcbbdee9b4b9fa630b65af9cb88296697032c52d312b5633061030206dbab6093f17", @typed={0x37, 0x8f, 0x0, 0x0, @binary="616bd7a6b8a5586c62a5ff6988af39a1fa2acbc981158cb1b95f58ec53bb16e1e04abcea3f83df9f90fe3e1fb7a1782c4e63ac"}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000010}, 0x48042) r8 = openat(r3, &(0x7f0000001580)='./file0\x00', 0x10000, 0x25) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000015c0)='wpan3\x00', 0x0, r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x55}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6tnl0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) 20:13:18 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 20:13:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, 0x0, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:18 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 20:13:18 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:18 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000007080)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x2, &(0x7f0000002300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000002780)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/158, 0x9e}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000002580)=""/240, 0xf0}, {&(0x7f0000002680)=""/201, 0xc9}], 0x5, &(0x7f0000002800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002900), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003a80)=""/247, 0xf7}, {&(0x7f0000003b80)=""/236, 0xec}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/248, 0xf8}, {&(0x7f0000002980)=""/101, 0x65}, {&(0x7f0000004d80)=""/241, 0xf1}], 0x6, &(0x7f0000004f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/237, 0xed}, {&(0x7f0000006100)=""/217, 0xd9}, {&(0x7f0000006200)=""/144, 0x90}, {&(0x7f0000002a00)=""/52, 0x34}], 0x5, &(0x7f0000006340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000006400), 0x6e, &(0x7f0000006640)=[{&(0x7f0000006480)=""/21, 0x15}, {&(0x7f00000064c0)=""/40, 0x28}, {&(0x7f0000006500)=""/120, 0x78}, {&(0x7f0000006580)=""/75, 0x4b}, {&(0x7f0000006600)=""/10, 0xa}], 0x5, &(0x7f00000066c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000006740)=@abs, 0x6e, &(0x7f0000006b40)=[{&(0x7f00000067c0)=""/255, 0xff}, {&(0x7f00000068c0)=""/191, 0xbf}, {&(0x7f0000006980)=""/50, 0x32}, {&(0x7f00000069c0)=""/62, 0x3e}, {&(0x7f0000006a00)=""/170, 0xaa}, {&(0x7f0000006ac0)=""/111, 0x6f}], 0x6, &(0x7f0000006bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000006cc0)=@abs, 0x6e, &(0x7f0000006e00)=[{&(0x7f0000006d40)=""/98, 0x62}, {&(0x7f0000006dc0)=""/62, 0x3e}], 0x2}}, {{&(0x7f0000006e40), 0x6e, &(0x7f0000006f40)=[{&(0x7f0000006ec0)=""/71, 0x47}], 0x1, &(0x7f0000006f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}], 0x8, 0x40000000, &(0x7f0000007280)) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) openat(r5, &(0x7f00000072c0)='./file1\x00', 0x8000, 0x82) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) pread64(0xffffffffffffffff, &(0x7f0000007300)=""/79, 0x4f, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:18 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:18 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) clone3(&(0x7f00000007c0)={0x1a982000, &(0x7f0000000640)=0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), {0x2f}, &(0x7f0000000700)=""/31, 0x1f, &(0x7f0000000740)=""/17, &(0x7f0000000780)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000840)={0x0, 0x0, 0x4d, 0x9}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20d315) getsockname(0xffffffffffffffff, &(0x7f0000000880)=@in, &(0x7f0000000900)=0x80) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/111, 0x47}, {&(0x7f0000001640)=""/217, 0xd9}, {&(0x7f00000005c0)=""/100, 0x64}], 0x7, &(0x7f0000000940)=ANY=[@ANYBLOB="1c00000000a1c43c31b1defd4e0049f655004e39be09bf6192556f9c70b6d43f2de3d8764b519c3bf4d7c625df84a4d0f5467e891e8a11bab80bd5d97de43f228dc582cc11f409f4f3e629d16240c5fee37d1d228f5f2baf9dd8f37574a873dcbd14b0bbaa754e4d083277d53c3cd47030ff462a56654b1e3723a191995ea72b28ca90f7d5383e31ce0dae9a605dd90ffd3f3e06ffb31a495f0a327b3e73a95efe34baa48eb687331d59ce6b28a4bed02530a569bbc36db63df103fe68718d9fc63a322fb69940a6875a74eb3b3d95f3e70a2bf26f10baa20099955e05c3f9ab57e666828f2d74e157", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x1) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x1000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsync(0xffffffffffffffff) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000240)) 20:13:18 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) io_uring_enter(r8, 0x37d0, 0x1411, 0x1, &(0x7f0000000380)={[0x4]}, 0x8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xff, 0x8, 0x5, 0x20, 0x0, 0x8000, 0x48200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x128, 0x80000000, 0x8, 0x9, 0x7f, 0x5000000, 0x4, 0x0, 0x200, 0x0, 0x7}, r9, 0x5, r5, 0x1) [ 1674.408133] FAULT_INJECTION: forcing a failure. [ 1674.408133] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.409618] CPU: 1 PID: 9585 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1674.410361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.411268] Call Trace: [ 1674.411565] dump_stack+0x107/0x167 [ 1674.411962] should_fail.cold+0x5/0xa [ 1674.412384] ? create_object.isra.0+0x3a/0xa20 [ 1674.412889] should_failslab+0x5/0x20 [ 1674.413296] kmem_cache_alloc+0x5b/0x310 [ 1674.413753] create_object.isra.0+0x3a/0xa20 [ 1674.414228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.414785] kmem_cache_alloc+0x159/0x310 [ 1674.415246] xas_alloc+0x336/0x440 [ 1674.415633] xas_create+0x34a/0x10d0 [ 1674.416054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1674.416546] FAULT_INJECTION: forcing a failure. [ 1674.416546] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.416624] xas_store+0x8c/0x1c40 [ 1674.419272] __xa_store+0x164/0x2d0 [ 1674.419684] ? xa_delete_node+0x280/0x280 [ 1674.420153] ? trace_hardirqs_on+0x5b/0x180 [ 1674.420643] xa_store+0x31/0x50 [ 1674.421014] __io_uring_add_tctx_node+0x1cf/0x520 [ 1674.421556] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1674.422155] __do_sys_io_uring_enter+0x14de/0x1920 [ 1674.422700] ? lock_downgrade+0x6d0/0x6d0 [ 1674.423160] ? find_held_lock+0x2c/0x110 [ 1674.423607] ? io_submit_sqes+0x85c0/0x85c0 [ 1674.424096] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.424634] ? wait_for_completion_io+0x270/0x270 [ 1674.425178] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.425703] ? vfs_write+0x354/0xa70 [ 1674.426140] ? fput_many+0x2f/0x1a0 [ 1674.426549] ? ksys_write+0x1a9/0x260 [ 1674.426969] ? __ia32_sys_read+0xb0/0xb0 [ 1674.427434] do_syscall_64+0x33/0x40 [ 1674.427846] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1674.428421] RIP: 0033:0x7f818218db19 [ 1674.428841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.430885] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.431730] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1674.432515] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1674.433301] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.434085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.434873] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1674.435666] CPU: 0 PID: 9586 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1674.437115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.438803] Call Trace: [ 1674.439349] dump_stack+0x107/0x167 [ 1674.440091] should_fail.cold+0x5/0xa [ 1674.440877] ? xas_alloc+0x336/0x440 [ 1674.441642] should_failslab+0x5/0x20 [ 1674.442429] kmem_cache_alloc+0x5b/0x310 [ 1674.443258] xas_alloc+0x336/0x440 [ 1674.443981] xas_create+0x34a/0x10d0 [ 1674.444755] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1674.445836] xas_store+0x8c/0x1c40 [ 1674.446582] __xa_store+0x164/0x2d0 [ 1674.447310] ? xa_delete_node+0x280/0x280 [ 1674.448167] ? trace_hardirqs_on+0x5b/0x180 [ 1674.449032] xa_store+0x31/0x50 [ 1674.449710] __io_uring_add_tctx_node+0x1cf/0x520 [ 1674.450674] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1674.451763] __do_sys_io_uring_enter+0x14de/0x1920 [ 1674.452768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.453842] ? io_submit_sqes+0x85c0/0x85c0 [ 1674.454730] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1674.455638] ? finish_task_switch+0x126/0x5d0 [ 1674.456553] ? finish_task_switch+0xef/0x5d0 [ 1674.457450] ? __switch_to+0x572/0xf70 [ 1674.458255] ? __switch_to_asm+0x3a/0x60 [ 1674.459085] ? __switch_to_asm+0x34/0x60 [ 1674.459942] ? __schedule+0x82c/0x1ea0 [ 1674.460743] ? io_schedule_timeout+0x140/0x140 [ 1674.461674] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1674.462610] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1674.463732] do_syscall_64+0x33/0x40 [ 1674.464489] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1674.465523] RIP: 0033:0x7f27221a7b19 [ 1674.466285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.469958] FAULT_INJECTION: forcing a failure. [ 1674.469958] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.470007] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.472752] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1674.474207] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1674.475660] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.477103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.478561] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1674.480031] CPU: 1 PID: 9588 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1674.480822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.481721] Call Trace: [ 1674.482028] dump_stack+0x107/0x167 [ 1674.482436] should_fail.cold+0x5/0xa [ 1674.482856] ? xas_alloc+0x336/0x440 [ 1674.483261] should_failslab+0x5/0x20 [ 1674.483680] kmem_cache_alloc+0x5b/0x310 [ 1674.484143] ? stack_trace_consume_entry+0x160/0x160 [ 1674.484720] xas_alloc+0x336/0x440 [ 1674.485131] xas_create+0x34a/0x10d0 [ 1674.485556] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1674.486153] xas_store+0x8c/0x1c40 [ 1674.486567] __xa_store+0x164/0x2d0 [ 1674.486981] ? xa_delete_node+0x280/0x280 [ 1674.487443] ? trace_hardirqs_on+0x5b/0x180 [ 1674.487929] xa_store+0x31/0x50 [ 1674.488298] __io_uring_add_tctx_node+0x1cf/0x520 [ 1674.488841] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1674.489431] __do_sys_io_uring_enter+0x14de/0x1920 [ 1674.489995] ? lock_downgrade+0x6d0/0x6d0 [ 1674.490461] ? find_held_lock+0x2c/0x110 [ 1674.490920] ? io_submit_sqes+0x85c0/0x85c0 [ 1674.491408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.491949] ? wait_for_completion_io+0x270/0x270 [ 1674.492501] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.493022] ? vfs_write+0x354/0xa70 [ 1674.493441] ? fput_many+0x2f/0x1a0 [ 1674.493857] ? ksys_write+0x1a9/0x260 [ 1674.494278] ? __ia32_sys_read+0xb0/0xb0 [ 1674.494744] do_syscall_64+0x33/0x40 [ 1674.495169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1674.495741] RIP: 0033:0x7f9a776e8b19 [ 1674.496157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.498222] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.499068] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1674.499864] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1674.500659] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.501466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.502260] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:34 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:13:34 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:34 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:34 executing program 6: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_io_uring_setup(0x2995, &(0x7f0000000200)={0x0, 0x82b2, 0x1, 0x1, 0x11f}, &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000340)={0x202, 0x100, 0x10}, &(0x7f0000000380)='./file1\x00', 0x18, 0x0, 0x23456}, 0x81) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xd2) sendfile(r7, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:34 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x6, 0x80, 0x0, 0x10001, 0x0, 0x1}, 0x400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000054c0)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x800, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040300, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x204440, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, 0xffffffffffffffff, 0x7e88f000) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000440)={{}, r7, 0x10, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000}, [0x10001, 0x20, 0x6, 0x7fff]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000580)={{r5}, r7, 0x8, @inherit={0x68, &(0x7f0000001940)=ANY=[@ANYBLOB="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"]}, @subvolid=0x80000000}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000940)={{}, r7, 0x8, @unused=[0x10000, 0x8, 0x8001, 0x3], @name="f0ea172a0e3a6f667aaaf1fea385da69f740ea354f39e9038e388b7a391264e4067019da334971dd627946fe5dc50c6841247860c113d72b74f3f85fe7146c1471294396d8358ab18c8e45a9bb4e1f90983b3dd6bfac57cbde4bb3b4994e02c7ea3fdd259fb1487f8fff4af729fed09357354dd8f8061abd08c79c717b094c14e9406c9018f8f657c47f7c4a8e1d2ebe5752ef66973c53ea073c4796ef8402e08b5ba4fa9bbdfa51e64a9372bf6609eea76189d7ffcd1b68ecc28786856cb30b6a1b29b54ae6785b1e60c22fd94e44c4afa05320b0a29b3ebffe9b1575513555f1a654379bdcaa6efb6af6c7eb42019cdf8aab418c74c9c8f167cc7708d2e48ee3da911079e476b43b185534562d10f95c79e61ff6eb91d87e83cd03a735c82939531de0a0fdb66c9844133ab6a04723aaf31fd54386cdc90611233b375f070481114ab35f00bbc3f391a64ed2a326e55db71aff9510621c475fd4cd2b7750406593e21ff02ff17599b42f5447eaf9fccfc78436e54934e132c3b16a2ed0be28df03a19876b3c1918b3fcf4406a3a246a32c9ed2f721eee7bb1fe8b8d789469aa03a704c972639b0d0aa2c93df29654574441a2baf00c05415da285207933cb61b933faa95835c2f48558422554e709ecdb341f9aa8e35d822096384eefca012bd63140ff310171f3f748d0221f1ed1f416307c369e98e575d4de0b571b4ffefe3883b7361fdd7ae77a02418eda0c4de6fd7cf3cad858e3ee8d6c1dc9988398badce2df01973691a8d10205cd66702459635118988ea856399ed74863e7633016f18c986c1d6674f26c2d1a95f90c6a50dd613e192cd6d5e8d56c56761092d17cf74e2293a0576dcc7395e785305e0488050c83158d93380ae242f6966acce006de9a2b77f5627965a79c20f2f3a38004d586363ab4dde3685839eb65973b7146fe6c2770881d37b7501c8a306f619dfd5de1130f9eef118fb845ec5e2e2f14f845169badcf87f50535fd15251d82694eb686b38b1b04064f7e4c6002ca2635adf3a4359f2a0e5fa579e53f1a11dbbf765adc9ab4c47fb1f5b860a7d8623d2797be55da380633a74a2f1c09f1b7aa3a6516d5f3b407d66c470ff27aa85a1ab2efa988d1a2225e1ac9eaa069b2add4de82c00efdd93b4b22818292596ad0bbcf4ebeb6dac65335980ce90b560c84013138c1b5a56fb8b9f58b6f33ad97b431ea97f9fe78cc60882a877e28a1b9472028a91b694d814cbddf560953d06ad1b2f1a9b9e30682e0f46ccc5c25fe609aecf79f38cbee53e4d1f2da87db4fa6e373eba11970cc2646710d2c82bd2715a805814cc8ae657876a9e1bda49cff31a57377f72b7fd025feb648acd2bd8a6b0dcdfc01709884f0411d9b21305ca00220f0106978d01e2eb7242cca3c729cda3cee906867d0d3b7be087a11940572b7be8b75c32d6fa60d185f7ccc9881aeaa6eb6946bd95100da340b8504ecb43c7325730be3a9017f5be9dacaf19f5217df8f63f79e13b9237a858fe03b5022ff497cbf00b4b400fe3edaad4f19da62b47889b2bfd58f3aed695f38bb7cdae452615c730f69bc78ebc53d23917f9db0c277a3f228d814fdb941154476a7f38bf23a4cefdaf59bea7ad4c7ee66b0580f1136db061c64fac27b953b373e0ba3a489d5d3daf3f92bd1380bca59d46f07927148a35dc4c9124799f90d1c69e288d93337a88982889aeb4205cfe47655539c122f9fba0b7cf3be956dc936c13affc943f527edc4daab9c108a52ba7332bd614fa3b5b104e5efaf1ac2fcaa8c74f427e83415ae359ed49f515bd4f5bfda2e2e35e2294c78c3a4306f34fc39ef350284efdcd973bee98274fed0522900caf201d949f59ec1c26a6c9c8a6ff01a494e0f54e1f5b501fb3249584d78e5256a209f4d01253c256b815eb5c2ae9c92f78a823b26a5a15a7e3b5962e3ad0672da88e4e61a1b86e8164fb02cf39ba96a916218591c8266e1c260f69febaf301e61585d4ea01f1b62aaf489b3a61fea6fe942b179f1f2aa54db2bd598decad3441716f9a11de70503b5aed130e0b5bfe533a2a52a258a8de5ceb78b140a7127a3d81b3a928a67c1229de1d87c9ec3af4a7fb92406f3e29153b56ffa31865235f31d60ee29eed22f8d0da689fff55c5594fb1e0d18231791521e66bbd5514409d70f322b3d8049a6fafe3d3a07c7f5b6a364771d6feb659133a44374666dfb44d6b1e29cefed9ac5852f7207654feded5a412792040a4a05f83aa2788b53ae8cca56bbead981d0862d79dc06011645f2f6c96f9346fb9c9aff52cb275bde222b693b89392c99ed4a0d23cf3c33a6ff320b6f9ec5580b9d276a8127bf0c16de569af9e389e7e87089f4f57b8471157b9f6b7e9447a6cb5f1fc026abf2b89e536f043a4c0729f3b4b28fd406093ef81776402f0b796afd80e67ec03e9a967e04473f82f4652cde27a3660abc70dc394ef7dfa7640d74df6a32b6be886cbd347d2a5fa28eca6ae209ff065e87eb8f7ccd803196b1fab3fdc9d618b8dede95ca5f20c49c8d8f55cb70ec5a6465f0a4d27dadfc6fe86562d609cc2f95e98f4fd7bc7c1bf700994cffa5611e3752e8d22f94bc7fc67b369217db5fa020cb8281c7fa612007b26735b9bb4eebe7e9cd4b780e3af1be7e941eff300614f2092d61d60c05cd14e7a5756048056e93832a5c580801507bb06905f61d9c238fa8ce1c85d0000d0d61681f5d9a5ee9d4fdb4496c16e8afe8f9486bed9d8275374ed3d1ea0aa0f98c0dd158dbf7848b518561c5572af6668ebc772ddf950f20bb3d78fcdc0e9a50d903e183768478fcbe706b9e22177ee8a19b5d81af350965c7014c6c7b696d593804a2ad83fadcedbb383c02dd2edd13a253f8cc6d8c5eca322410ba5a4001a7489063089af2cd9bb78a1fcf5b8a44646741b7b4d05966ab11ff7a0b260a1176079a7affcaa73c6a116e561e1376f6ebc52b078d2f9109167e31947f345587d9d0b4a5256447585d46bacb87de1d9f6c3e04da9a5d5b0d6d5293bf1e8f81d54a33e9bc2458963b04523c10f5579cbf7a34324780daf18bb9b217f998579cdec34308905690cba2bba5971e0e0a732a5124af7562695392999c5d7907f7f8d14f5bc3d2da3c73bb0c414d4ffa27ecf16a591f54dce566f6d74678e13fe7729421efc7e9111b29a232fff7711ffc1e09f9ff9e6bed109def0a147d8c826c88b268dc2b7335f2393a0ee15b7261d80ac4dbed7fbb6e0ca3cb0389bdf0da663c23176fb98dec81100c32d03b5318c1d09030a2c1fb609981618dca52108dd3a2b9c758dc6e85dc83bf716782cba34a1dd9c8da051f5a5a0d5deae27e2b9a8b4dd6996a9f85e9871ea757ae59b1113cc4972e9bdb6892ef4a50013c255085e70ee22be9bd6a961b39b571d34348919c2d7e3532994c923e24c5c0ede17be8a1d3a8b67acd7f47363c0fc30c9afa192d041ca54e899ab821f06bd3773818d6086b9322138be53f2db84f8a735998f10632fa9fcdefd2c20a4298bd156eaf26062dba1651fe94b524fad59a6a70d53937e8d30fd258cdef3ea74d31dbce03f6effc1b176b67bdb9877f87c3f7d8b6e8a955289b52249760d374ae614dc52d6c7c890440d9ced88765813f1c88fb7348055c92b1d3d6e76d818040c77049383f175c316934844571e5027e200e35e042a5428b5b52b65e1dcae5e98672b3ef470ca77701cd7cb2a34536eb19232e80f8b9585188fd536be365e5e8d97bcf141b514e6bdfbefed40395bcd6179b4be4ac002b63497da1623aef71e4c7615d4e6eabbd9375dfad8907396a8ed73f33ff9f6fa8bf7dd1725a9ee83f528df4a10a2e6eb4ddfd59e3af0eff7a4db29e42bff6f397c7c136ee16328a2b15a22e32782872eb7d2e797a042b683546fae9266406b2b597ee48998f6fb6a0a487a254092cd616ac160872af6eaad162f2c8f9dc0e7a0a5d3fb6d0da171d2a09141160e0aee17a94845f24fed3d49e80ffbe9dbf45496df35d602eabbdee5c5875856a3b5aca997e7279bcf7f28723c330bee169245d215620f79071661fd41c929d8ab85cdb67ab6786d5ec5046f4f4dad1f525c751d183648178eabf47003a74d713f8e734ec7fb1327b4fed037228b914ded7e5ebe18f1ea1ba6f6d84f73aa079abd9c84eb9e2cc25dc374ebeaef34c5a2cf0988c75767d8aef07e304974571455ace8add46422a0d675be1bd8f86f0d7b5b246f2f5d379c8c2769e495f8b89d7eec8a6f5d5c3b18e9184317c4f9cf8f566d40455f120afc7b61c32502e0624dc651f05da5b6c02bbc7e0b5abc673b112ac6d3630e2cbfa9fa32ac15f16a4da2ad1cfd46a0d3c60bbac1ff7cf6ca48c7dba61e6d1dc1a526431f6f9266d4b966e5db3b572f374454bf4e3c0b8b3e6b2f66aa37343ad9950db479c2699c455aefeb2e849206848b188b55a08e5a7a8046b447351a1f4030d8c1e36cfd4f56632a00f51924056225d2369f04030762cc3604a6bfe33c79e439819d8c17d4449a9024d1dff321d5ab3a2e73c5470032738d659fe8f0aca15457273f9f234a83575f049640d4ff38733fa3d824d19efa0789fd65387e32ecf3f8d794ac1c7a66902bffbc113956ed592689cd61c4b1f7716c5bc8ac8c2591f3152e0dc63a361170e4643c57fb1f977005d40cd45acdef53568dbf47eae99c94d850666c8e50e4468522cdadbeb1ed025de4ea22a4bacc9431cead8b37c31ce735ed1ee9a12e50ec2bee5d2d4d25f0a83dc786d5f3e6d5824bcc264667b1ae1cceedb64aa716d4b9906ff877999ffb391c37aa64707fcc72e98dac152537d97ff9252cc6722eecbb9754bf354dc368852327af20b5e55e514d05f549af033a3828bcf27ee9c88fba23d9ba53687b24a17f0801c6ff53084f89a6b716b10983e5254145d5c388c95b4b39ea6c9f6b6319c2b6ec430f72983176b1600b5eec35818bcd4ecd95d5454778c98bd986452d001bacd565e33f06f7de197d1bcf5147d775cd80a5b1375bfe0c2af84c982b515351d9a3f9b12a6ad712b36dc51f53866f1ef5533d1ece2404a902756c1c4e0b3d6a4d0f824587c0f2c1e1473cdc1ce8898f854dceb89c726a121e581ce993fe34d14d3035ae9bfddf42982ea28d5f30ec249e8babd7d44923499dbc83ec1e72dad84cf911060e51e6e357435b85c55ea5344fe3c055dbcd6f20068af3b6f9fee53aba24a9bc3c76b3973d732d530e688ec943974187899ec53728414d79e7488ff877f9fd0a2834be20cd11ee8d41103155f9cb6a6245aef83bb82a491d35949c707ae2d32f3d091010926e058cdf9c3bdba622ea9265d6c2316bcb8510c01208b72bd152d5f7a17c4c1e886f1600296782b939ed3927d9961cb0f8713ca5fd8106e892c8a6e3abe964ac12e8f93a80a97b9078c7443481cadba9f442c458c7c513f71a25db18d5ae010f3bf39f08420314fff92cfcac18ecf17df28092ca760f135ce61180af0edfc5dacae5417b871463df146b6bbf0be1437ff02ac124cf36c13172e578c7279fb008e5a76c89b24a2b3fb98761eb54d708b004010d73c8bb891e72877a226fff3dcd92c1b6d2e034d358a4c5d70d29a2a1f56bc15244b7a5564f188b275d0cea915d6fa9fe2804167caec1a113dee1c52e1944aa8e887b2d69ff5d3bea2fb79785e7ce5081f6b58dc19d4154021bf9a064cfc8bcc8f465c063"}) 20:13:34 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1689.806960] FAULT_INJECTION: forcing a failure. [ 1689.806960] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.809392] CPU: 0 PID: 9616 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1689.810923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.812650] Call Trace: [ 1689.813208] dump_stack+0x107/0x167 [ 1689.814014] should_fail.cold+0x5/0xa [ 1689.814809] ? xas_alloc+0x336/0x440 [ 1689.815591] should_failslab+0x5/0x20 [ 1689.816384] kmem_cache_alloc+0x5b/0x310 [ 1689.817230] xas_alloc+0x336/0x440 [ 1689.817971] xas_create+0x34a/0x10d0 [ 1689.818745] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1689.819820] xas_store+0x8c/0x1c40 [ 1689.820573] __xa_store+0x164/0x2d0 [ 1689.821326] ? xa_delete_node+0x280/0x280 [ 1689.822191] ? trace_hardirqs_on+0x5b/0x180 [ 1689.823075] xa_store+0x31/0x50 [ 1689.823758] __io_uring_add_tctx_node+0x1cf/0x520 [ 1689.824748] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1689.825833] __do_sys_io_uring_enter+0x14de/0x1920 [ 1689.826845] ? lock_downgrade+0x6d0/0x6d0 [ 1689.827725] ? find_held_lock+0x2c/0x110 [ 1689.828564] ? io_submit_sqes+0x85c0/0x85c0 [ 1689.829448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1689.830451] ? wait_for_completion_io+0x270/0x270 [ 1689.831444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1689.832396] ? vfs_write+0x354/0xa70 [ 1689.833166] ? fput_many+0x2f/0x1a0 [ 1689.833906] ? ksys_write+0x1a9/0x260 [ 1689.834712] ? __ia32_sys_read+0xb0/0xb0 [ 1689.835561] do_syscall_64+0x33/0x40 [ 1689.836332] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.837379] RIP: 0033:0x7f27221a7b19 [ 1689.838151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.841910] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1689.843446] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1689.844894] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1689.846358] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.847790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.849232] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1689.853242] FAULT_INJECTION: forcing a failure. [ 1689.853242] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.855123] FAULT_INJECTION: forcing a failure. [ 1689.855123] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.855841] CPU: 0 PID: 9621 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1689.855853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.855859] Call Trace: [ 1689.855881] dump_stack+0x107/0x167 [ 1689.855906] should_fail.cold+0x5/0xa [ 1689.855925] ? xas_alloc+0x336/0x440 [ 1689.855947] should_failslab+0x5/0x20 [ 1689.855965] kmem_cache_alloc+0x5b/0x310 [ 1689.855991] xas_alloc+0x336/0x440 [ 1689.856014] xas_create+0x34a/0x10d0 [ 1689.856054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1689.856080] xas_store+0x8c/0x1c40 [ 1689.868740] __xa_store+0x164/0x2d0 [ 1689.869478] ? xa_delete_node+0x280/0x280 [ 1689.870346] xa_store+0x31/0x50 [ 1689.871014] __io_uring_add_tctx_node+0x1cf/0x520 [ 1689.871985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1689.873058] __do_sys_io_uring_enter+0x14de/0x1920 [ 1689.874066] ? lock_downgrade+0x6d0/0x6d0 [ 1689.874899] ? find_held_lock+0x2c/0x110 [ 1689.875725] ? io_submit_sqes+0x85c0/0x85c0 [ 1689.876604] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1689.877579] ? wait_for_completion_io+0x270/0x270 [ 1689.878560] ? rcu_read_lock_any_held+0x75/0xa0 [ 1689.879497] ? vfs_write+0x354/0xa70 [ 1689.880252] ? fput_many+0x2f/0x1a0 [ 1689.880991] ? ksys_write+0x1a9/0x260 [ 1689.881762] ? __ia32_sys_read+0xb0/0xb0 [ 1689.882615] do_syscall_64+0x33/0x40 [ 1689.883369] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.884400] RIP: 0033:0x7f818218db19 [ 1689.885160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.888857] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1689.890397] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1689.891830] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1689.893282] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.894761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.896226] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1689.897724] CPU: 1 PID: 9618 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1689.899132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.900801] Call Trace: [ 1689.901341] dump_stack+0x107/0x167 [ 1689.902111] should_fail.cold+0x5/0xa [ 1689.902883] ? xas_alloc+0x336/0x440 [ 1689.903642] should_failslab+0x5/0x20 [ 1689.904578] kmem_cache_alloc+0x5b/0x310 [ 1689.905511] ? stack_trace_consume_entry+0x160/0x160 [ 1689.906541] xas_alloc+0x336/0x440 [ 1689.907260] xas_create+0x34a/0x10d0 [ 1689.908025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1689.909080] xas_store+0x8c/0x1c40 [ 1689.909813] __xa_store+0x164/0x2d0 [ 1689.910564] ? xa_delete_node+0x280/0x280 [ 1689.911414] ? trace_hardirqs_on+0x5b/0x180 [ 1689.912287] xa_store+0x31/0x50 [ 1689.912969] __io_uring_add_tctx_node+0x1cf/0x520 [ 1689.913944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1689.915032] __do_sys_io_uring_enter+0x14de/0x1920 [ 1689.916025] ? lock_downgrade+0x6d0/0x6d0 [ 1689.916873] ? find_held_lock+0x2c/0x110 [ 1689.917693] ? io_submit_sqes+0x85c0/0x85c0 [ 1689.918583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1689.919556] ? wait_for_completion_io+0x270/0x270 [ 1689.920527] ? rcu_read_lock_any_held+0x75/0xa0 [ 1689.921466] ? vfs_write+0x354/0xa70 [ 1689.922239] ? fput_many+0x2f/0x1a0 [ 1689.922982] ? ksys_write+0x1a9/0x260 [ 1689.923750] ? __ia32_sys_read+0xb0/0xb0 [ 1689.924591] do_syscall_64+0x33/0x40 [ 1689.925342] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.926380] RIP: 0033:0x7f9a776e8b19 [ 1689.927130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.930841] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1689.932371] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1689.933822] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1689.935270] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.936701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.938155] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:34 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x3, 0x1, 0x10}) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) sendfile(r0, r6, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0x97, 0x4) fstat(r0, &(0x7f0000000080)) r2 = socket(0x1, 0xa, 0x1000) dup(r2) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0xa, 0x10, 0x0, 0x0, @str='@\xcf\xd8.-\x00'}]}, 0x28}}, 0x0) 20:13:34 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1690.294112] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1690.299794] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 20:13:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:34 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1690.394754] FAULT_INJECTION: forcing a failure. [ 1690.394754] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.397172] CPU: 0 PID: 9641 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1690.398603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.400479] Call Trace: [ 1690.401057] dump_stack+0x107/0x167 [ 1690.401826] should_fail.cold+0x5/0xa [ 1690.402667] ? xas_alloc+0x336/0x440 [ 1690.403449] should_failslab+0x5/0x20 [ 1690.404229] kmem_cache_alloc+0x5b/0x310 [ 1690.405085] xas_alloc+0x336/0x440 [ 1690.405828] xas_create+0x34a/0x10d0 [ 1690.406645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1690.407728] xas_store+0x8c/0x1c40 [ 1690.408506] __xa_store+0x164/0x2d0 [ 1690.409274] ? xa_delete_node+0x280/0x280 [ 1690.410151] ? trace_hardirqs_on+0x5b/0x180 [ 1690.411056] xa_store+0x31/0x50 [ 1690.411754] __io_uring_add_tctx_node+0x1cf/0x520 [ 1690.412751] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1690.413868] __do_sys_io_uring_enter+0x14de/0x1920 [ 1690.414891] ? lock_downgrade+0x6d0/0x6d0 [ 1690.415741] ? find_held_lock+0x2c/0x110 [ 1690.416597] ? io_submit_sqes+0x85c0/0x85c0 [ 1690.417502] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1690.418510] ? wait_for_completion_io+0x270/0x270 [ 1690.419502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1690.420443] ? vfs_write+0x354/0xa70 [ 1690.421238] ? fput_many+0x2f/0x1a0 [ 1690.422000] ? ksys_write+0x1a9/0x260 [ 1690.422785] ? __ia32_sys_read+0xb0/0xb0 [ 1690.423660] do_syscall_64+0x33/0x40 [ 1690.424425] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1690.425464] RIP: 0033:0x7f9a776e8b19 [ 1690.426241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.429980] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1690.431693] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1690.433338] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1690.434834] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.436276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.437739] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:34 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) io_uring_enter(r4, 0x7c5b, 0x794b, 0x3, &(0x7f0000000000)={[0x3]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:35 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:35 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2, 0x0, 0x0, 0x0) 20:13:35 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 20:13:35 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:13:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, r2}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000001100)={0x4fc, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x4}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d70}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72e}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xccaf}}, {0x8}}}]}}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000001600)="d9291476ae979bcd50ce2867b39ade61a6ce84f220b20e1f73aff5c41ce1cb6da46ba4d3e10dceeb39eecf0b28d19c2391fe0883b7c983e82b6c8d30d383d5cedd6e0b32c45b2739b355f777d94c78e061f09fa400fcc90d1695b3a04e54fbd3451b4d185df487a283a4d7bd44f30192b45a4da77094dee0165549835700cdff37ae22fd23533cf694454e35806b4e5ebaf715c4e404051cffb1ff7e9aeb657a833e53ddd71e8a9937f4fdd2f6e5f653a2939cfb52b64f560af71ab8566f2f242181b1271347c22c05cd7dd314ae1e4cd439a5e416496cf071ae644272a142584a9eed4d3e5d1e7beb148361", 0xec}, {&(0x7f0000000480)="0d683f70ca20ff1fdc3c13f5f00f77de5696ec3f1f997f9f3a57884a65cc096f15f41afa820f77c333bbffbc128fc4fe2ee616df4271e359d539c51c643d1abdc006751c23e94f067430172ad35959ef68619c4ba970fef4760ada7faf29c7c63f6f07622a13b942", 0x68}, {&(0x7f0000000640)="c599de2bf8578c8eb773a3f4ddf65853b7c85cbe2b94fb6c7f9ec6d136c011278f2f602b44718cddcc1dbe597d7f6f7c59ed63e7e14f1841f37190fa75c5ee67321e1aa5d133a31b695038bb7e8900b597f9676d802c8c7f394749a040ef217160c1c900b1a55793bd97bf5a55a098b1bbb332bc8bc891197f4751866adbabff9b9f45152f14635789a382a938ad6392f2b054713e57720a876cb1f2daba5a051ca21f289ee046467b3e05d333afce239337c80b34f1e115318d626818ba4cf0ad93f6d4ce5c52077099addfcd5dd4c72e4ae1d4c607", 0xd6}, {&(0x7f0000000500)="1c15b9376fe6167265b623c61d7da8ac0465ee019a678065199538399cf702b808568fd9ee26dd19d9c079b3a069837e11c2af869365303e7833bc8c9e261181d825b11351a54d17d3a9282cd000a04060ab95bd6faee133b800fd4ed670956184e64242a9ebfdac2d7038b6bebe2374b8ccb734281be5df0b6b9386322343c06a4c02c9941fb456e64e6241c647d997973bd043c494f82fa4b4", 0x9a}], 0x4, &(0x7f0000000780), 0x50}}, {{&(0x7f0000000800)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000840)="ebc296c6e75f8a3b8c11af57d71288167c4174e341cef555293da6e9dce9a7f72f5673933d44d425951e88c9c3c1411521a296f7eb87e31ad03e0b390aa0ec232d10a5eccfd87a333522846a77f5a21e312f5ced72cc0384cb3ead5c717490748ed08937225187f6ca31767043e5e3308fa7bb63058d8886e341922243cd3d32ea72b50553f2bc7e874d16c2b254ee67e832451dc329b0b20aed87d8b58c11f066af72bb3ed182dab84c846bacd5f4377725c6204e88710f4e3c", 0xba}, {&(0x7f0000000900)="bd3764eb13c1dbb6635e29f821e8d67cb3a57af73d32c6785e69719054eb242890d0f93d1f43ccc3f987a91eaae84fce98fa944fd5056a24a79d10536c6653194fc2dcc7170674c8552a2611c6edf65c78fa1ce67842d00d3000cb2bae830f18a11239bcd4d4317a01284bf5c1ef629c0ea633c0c070f2da8fcb3e00411d24", 0x7f}, {&(0x7f0000000980)="209b6d309bc733d1feea5f122a7ba0057e5880cb54ee8f27a00d971e41ff7775d82c789f373399624194397fc56670e5bac484baa0b31621240439bab18ce1af2bfcb36d56e3b809c16d24a20339eaf44f2268acf3ee6d6388276978b58465daf1222818b14c716decf24bc44b8d5db22ac395615cc8df299d456c4fa8d7e0a944311037f7a2b46d3e59b37ac402112443b4dc15717a9e6fffa926dbd14af8dd722724f326e13e361edc288e1ecfadb4a451a93bca5209a7957c3fd0b0530ef87923f15ed2396e52455e84e2490feb5bc6de15", 0xd7}, {&(0x7f0000000a80)="307a43dcabdb3be22e52d9674901438fbfa7b3b3cd6ca59fbc7a0f5fa6a064b6eba324754f0e63f637748895751d483d213c5340749c4b5c34fd178e43f4f7522695e28a8519fded1166028ce3bc58669de7ffb396ad9b82735ab7a721cdc875da833e2a3c31af1cd90323ff98a94fbe39dfe5e6464fdc5423d99ab2dfce3d95eff113615948cf14dfd6c3289d9ce21673d8db7dca87a9e4e1534dbd26ace3eff9cedf6082c0531b1694d47c4b8b2b8d3f506d83289cdf509343af", 0xbb}], 0x4, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x949}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_tos_u8={{0x11}}], 0x80}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000380)="4846b143ae115abfdff5d1439e3acccaa73e5a93f2ed4ff29f6e498170f22eaf0f5552acaec8df338f94c64918bf8a4d7e1468ff9dd0948ac5397cde7e3a", 0x3e}, {&(0x7f0000000c80)="5080ba9d0e1c4f746d9042d6262d385d7cab5a9d0234003b7ef8d56bb7e9326919bda6a05182ecb80e91130dcef334262c451bb4bd9c442e8c1faf353caa0f80d3b2b0fab7247035854958857d076f74ac3afc5441a2535cf6f535662ac0b829a4eaa822108a790a733cec14ef9e7bf2b7e82865231db4f3a4a6c3527b81e2b4777eed2559076dad3d17fbe34d9fb1de6020263cb5c61ede57cd40dfda0bafd0af70b1ec8d0f3e7f8f596f7f071a9ed4e637faacbd10ff4e4820cba52566db39ff40faea516cb4277debfe4951858b1616e8942448b8f2c9ffa0a9e99a7bcc7674529c8d130333ed06b40cba5175f5023bd2eb53fe166a97", 0xf8}, {&(0x7f0000000d80)="a8f8b95a1aa44f47be39a162ecaae1de23b01206b660", 0x16}, {&(0x7f0000000dc0)="140bbad6d6c28a6fef4fa5e071b8efeefa1d64237b0d03167ab4ab1ae32ccfbf27945909986cf29184f5d280c00f54dd9a50129b9f73a9ea1f96aef23b544c7b7ec770d30cd7c52f94aa231530dd907234199214b11686bb0bdcb5a9eecd369ca02d21fb35be7f4a27eb405a134c68db1f349f0b0b2297f11cb79690d4dc3f723cb78e1b6c8db8cbfe04778d4d4d129490cd9d9c0f781eea125048afce7a75e09cb4423a43e29940673c2c8a80c67caa5c10aaf067e683037acdcc4c132000556d53ffa1752969e65df59d", 0xcb}, {&(0x7f0000000ec0)="53fb1845501326", 0x7}], 0x5, &(0x7f0000000f80)=[@ip_ttl={{0x0, 0x0, 0x2, 0x91}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0xb, "d274e7e8c0ad257225"}, @cipso={0x86, 0x32, 0x1, [{0x5, 0xa, "5b97ce3bdd644ead"}, {0x1, 0x11, "93a6ce67fd"}, {0x2, 0xa, "8d49cc4e3d5c116d"}, {0x0, 0x7, "2b2abb57d4"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0xb0}}], 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="007da1804886b1655e09966a7e07c44fecf87834ecdbb6650240e9635802006dcb1b3d4462fe59be4c707aed99769c856a16beb5764b17c759b22d78dcb8494ee15dcf7d0932dbaed64f8c680c37873c7d65eecdf0eaed8aa6cb52ef5ae7ab35864fec9cb6832dcf658d3b207a59e9d5"]) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x9, 0x8, 0x80, 0x4, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x1400, 0x9, 0x7fff, 0x6, 0x7f, 0x7f, 0x1, 0x0, 0xfffff001, 0x0, 0xd38}) mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0x0) r5 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x1f, 0x8000, 0x101, 0x4]}) mkdirat(r5, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000100)={0x9fcf, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file1', [{}, {0x20, '\xb8#\x90\x8a\xc3'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, 'ffat\x00'}, {0x20, '\\'}, {0x20, '\x00'}], 0xa, "2bbafb9d871e8a182aaaa667a7c4c9da64386a63f6b22e89b8dab7a5dbd814e3a1206dc7f2870f"}, 0x49) unshare(0x48020200) [ 1690.816558] FAULT_INJECTION: forcing a failure. [ 1690.816558] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.818965] CPU: 1 PID: 9666 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1690.820334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.821978] Call Trace: [ 1690.822510] dump_stack+0x107/0x167 [ 1690.823263] should_fail.cold+0x5/0xa [ 1690.824102] ? create_object.isra.0+0x3a/0xa20 20:13:35 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getgroups(0x1, &(0x7f00000006c0)=[0xee01]) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x0, r6}, {0x2, 0x2, r7}, {0x2, 0x6, r8}], {}, [{0x8, 0x2, 0xee00}, {0x8, 0x7, r9}, {0x8, 0x2, r10}, {0x8, 0x6, 0xee01}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x7}}, 0x64, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1690.825010] should_failslab+0x5/0x20 [ 1690.825901] kmem_cache_alloc+0x5b/0x310 [ 1690.826708] ? mark_held_locks+0x9e/0xe0 [ 1690.827490] create_object.isra.0+0x3a/0xa20 [ 1690.828329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.829304] kmem_cache_alloc+0x159/0x310 [ 1690.830107] xas_alloc+0x336/0x440 [ 1690.830788] xas_create+0x34a/0x10d0 [ 1690.831518] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1690.832520] xas_store+0x8c/0x1c40 [ 1690.833213] __xa_store+0x164/0x2d0 [ 1690.833904] ? xa_delete_node+0x280/0x280 [ 1690.834709] ? trace_hardirqs_on+0x5b/0x180 [ 1690.835528] xa_store+0x31/0x50 [ 1690.836153] __io_uring_add_tctx_node+0x1cf/0x520 [ 1690.837059] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1690.838065] __do_sys_io_uring_enter+0x14de/0x1920 [ 1690.838996] ? lock_downgrade+0x6d0/0x6d0 [ 1690.839771] ? find_held_lock+0x2c/0x110 [ 1690.840540] ? io_submit_sqes+0x85c0/0x85c0 [ 1690.841360] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1690.842288] ? wait_for_completion_io+0x270/0x270 [ 1690.843204] ? rcu_read_lock_any_held+0x75/0xa0 [ 1690.844081] ? vfs_write+0x354/0xa70 [ 1690.844783] ? fput_many+0x2f/0x1a0 [ 1690.845473] ? ksys_write+0x1a9/0x260 [ 1690.846198] ? __ia32_sys_read+0xb0/0xb0 [ 1690.846981] do_syscall_64+0x33/0x40 [ 1690.847685] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1690.848649] RIP: 0033:0x7f9a776e8b19 [ 1690.849346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.852805] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1690.854247] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1690.855585] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1690.856919] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.858255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.859586] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 [ 1690.864072] FAULT_INJECTION: forcing a failure. [ 1690.864072] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.866360] CPU: 1 PID: 9669 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1690.867660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.869250] Call Trace: [ 1690.869774] dump_stack+0x107/0x167 [ 1690.870502] should_fail.cold+0x5/0xa [ 1690.870862] FAULT_INJECTION: forcing a failure. [ 1690.870862] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.871260] ? create_object.isra.0+0x3a/0xa20 [ 1690.874387] should_failslab+0x5/0x20 [ 1690.875131] kmem_cache_alloc+0x5b/0x310 [ 1690.875913] ? mark_held_locks+0x9e/0xe0 [ 1690.876689] create_object.isra.0+0x3a/0xa20 [ 1690.877496] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1690.878442] kmem_cache_alloc+0x159/0x310 [ 1690.879212] xas_alloc+0x336/0x440 [ 1690.879867] xas_create+0x34a/0x10d0 [ 1690.880563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1690.881534] xas_store+0x8c/0x1c40 [ 1690.882224] __xa_store+0x164/0x2d0 [ 1690.882896] ? xa_delete_node+0x280/0x280 [ 1690.883663] ? trace_hardirqs_on+0x5b/0x180 [ 1690.884467] xa_store+0x31/0x50 [ 1690.885076] __io_uring_add_tctx_node+0x1cf/0x520 [ 1690.885970] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1690.886956] __do_sys_io_uring_enter+0x14de/0x1920 [ 1690.887861] ? lock_downgrade+0x6d0/0x6d0 [ 1690.888622] ? find_held_lock+0x2c/0x110 [ 1690.889371] ? io_submit_sqes+0x85c0/0x85c0 [ 1690.890201] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1690.891099] ? wait_for_completion_io+0x270/0x270 [ 1690.891988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1690.892839] ? vfs_write+0x354/0xa70 [ 1690.893538] ? fput_many+0x2f/0x1a0 [ 1690.894232] ? ksys_write+0x1a9/0x260 [ 1690.894943] ? __ia32_sys_read+0xb0/0xb0 [ 1690.895721] do_syscall_64+0x33/0x40 [ 1690.896399] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1690.897342] RIP: 0033:0x7f818218db19 [ 1690.898029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.901437] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1690.902843] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1690.904113] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1690.905383] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.906675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.907956] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1690.909266] CPU: 0 PID: 9671 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1690.910801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1690.912485] Call Trace: [ 1690.913033] dump_stack+0x107/0x167 [ 1690.913778] should_fail.cold+0x5/0xa [ 1690.914565] ? xas_alloc+0x336/0x440 [ 1690.915322] should_failslab+0x5/0x20 [ 1690.916089] kmem_cache_alloc+0x5b/0x310 [ 1690.916918] xas_alloc+0x336/0x440 [ 1690.917640] xas_create+0x34a/0x10d0 [ 1690.918421] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1690.919482] xas_store+0x8c/0x1c40 [ 1690.920241] __xa_store+0x164/0x2d0 [ 1690.920980] ? xa_delete_node+0x280/0x280 [ 1690.921828] ? trace_hardirqs_on+0x5b/0x180 [ 1690.922722] xa_store+0x31/0x50 [ 1690.923394] __io_uring_add_tctx_node+0x1cf/0x520 [ 1690.924366] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1690.925441] __do_sys_io_uring_enter+0x14de/0x1920 [ 1690.926443] ? lock_downgrade+0x6d0/0x6d0 [ 1690.927274] ? find_held_lock+0x2c/0x110 [ 1690.928111] ? io_submit_sqes+0x85c0/0x85c0 [ 1690.928998] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1690.930001] ? wait_for_completion_io+0x270/0x270 [ 1690.930979] ? rcu_read_lock_any_held+0x75/0xa0 [ 1690.931926] ? vfs_write+0x354/0xa70 [ 1690.932684] ? fput_many+0x2f/0x1a0 [ 1690.933432] ? ksys_write+0x1a9/0x260 [ 1690.934224] ? __ia32_sys_read+0xb0/0xb0 [ 1690.935065] do_syscall_64+0x33/0x40 [ 1690.935820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1690.936851] RIP: 0033:0x7f27221a7b19 [ 1690.937600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1690.941286] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1690.942820] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1690.944249] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1690.945680] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1690.947121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1690.948550] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:13:49 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 20:13:49 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) fcntl$dupfd(r3, 0x406, r5) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) 20:13:49 executing program 1: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) pipe2(&(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee00) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x7240}, 0x1}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x3, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80464c453e) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r6, r1) 20:13:49 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000040)=0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:13:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x0) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:13:49 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:13:49 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1705.625045] FAULT_INJECTION: forcing a failure. [ 1705.625045] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.626510] CPU: 0 PID: 9702 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1705.627534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.628494] Call Trace: [ 1705.628807] dump_stack+0x107/0x167 [ 1705.629222] should_fail.cold+0x5/0xa [ 1705.629655] ? xas_alloc+0x336/0x440 [ 1705.630083] should_failslab+0x5/0x20 [ 1705.630542] kmem_cache_alloc+0x5b/0x310 [ 1705.631011] xas_alloc+0x336/0x440 [ 1705.631433] xas_create+0x34a/0x10d0 [ 1705.631867] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1705.632484] xas_store+0x8c/0x1c40 [ 1705.632899] __xa_store+0x164/0x2d0 [ 1705.633309] ? xa_delete_node+0x280/0x280 [ 1705.633795] ? trace_hardirqs_on+0x5b/0x180 [ 1705.634337] xa_store+0x31/0x50 [ 1705.634740] __io_uring_add_tctx_node+0x1cf/0x520 [ 1705.635311] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1705.635947] __do_sys_io_uring_enter+0x14de/0x1920 [ 1705.636533] ? lock_downgrade+0x6d0/0x6d0 [ 1705.637033] ? find_held_lock+0x2c/0x110 [ 1705.637524] ? io_submit_sqes+0x85c0/0x85c0 [ 1705.638053] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1705.638668] ? wait_for_completion_io+0x270/0x270 [ 1705.639245] ? rcu_read_lock_any_held+0x75/0xa0 [ 1705.639804] ? vfs_write+0x354/0xa70 [ 1705.640250] ? fput_many+0x2f/0x1a0 [ 1705.640678] ? ksys_write+0x1a9/0x260 [ 1705.641126] ? __ia32_sys_read+0xb0/0xb0 [ 1705.641616] do_syscall_64+0x33/0x40 [ 1705.642061] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1705.642684] RIP: 0033:0x7f818218db19 [ 1705.643129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.645300] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1705.646239] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1705.647087] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1705.647900] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.648758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.649567] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1705.652973] FAULT_INJECTION: forcing a failure. [ 1705.652973] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.654430] CPU: 0 PID: 9703 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1705.655299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.656263] Call Trace: [ 1705.656578] dump_stack+0x107/0x167 [ 1705.657011] should_fail.cold+0x5/0xa [ 1705.657469] ? create_object.isra.0+0x3a/0xa20 [ 1705.658014] should_failslab+0x5/0x20 [ 1705.658476] kmem_cache_alloc+0x5b/0x310 [ 1705.658959] ? mark_held_locks+0x9e/0xe0 [ 1705.659443] create_object.isra.0+0x3a/0xa20 [ 1705.659962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.660561] kmem_cache_alloc+0x159/0x310 [ 1705.661064] xas_alloc+0x336/0x440 [ 1705.661482] xas_create+0x34a/0x10d0 [ 1705.661927] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1705.662561] xas_store+0x8c/0x1c40 [ 1705.662990] __xa_store+0x164/0x2d0 [ 1705.663419] ? xa_delete_node+0x280/0x280 [ 1705.663918] ? trace_hardirqs_on+0x5b/0x180 [ 1705.664434] xa_store+0x31/0x50 [ 1705.664823] __io_uring_add_tctx_node+0x1cf/0x520 [ 1705.665397] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1705.666022] __do_sys_io_uring_enter+0x14de/0x1920 [ 1705.666619] ? lock_downgrade+0x6d0/0x6d0 [ 1705.667111] ? find_held_lock+0x2c/0x110 [ 1705.667601] ? io_submit_sqes+0x85c0/0x85c0 [ 1705.668118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1705.668685] ? wait_for_completion_io+0x270/0x270 [ 1705.669259] ? rcu_read_lock_any_held+0x75/0xa0 [ 1705.669802] ? vfs_write+0x354/0xa70 [ 1705.670271] ? fput_many+0x2f/0x1a0 [ 1705.670704] ? ksys_write+0x1a9/0x260 [ 1705.671149] ? __ia32_sys_read+0xb0/0xb0 [ 1705.671613] do_syscall_64+0x33/0x40 [ 1705.672025] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1705.672592] RIP: 0033:0x7f27221a7b19 [ 1705.673010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.675079] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1705.675928] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1705.676750] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1705.677560] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.678384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.679207] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:13:50 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1705.687636] FAULT_INJECTION: forcing a failure. [ 1705.687636] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.689028] CPU: 0 PID: 9705 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1705.689884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.690837] Call Trace: [ 1705.691158] dump_stack+0x107/0x167 [ 1705.691577] should_fail.cold+0x5/0xa [ 1705.692026] ? xas_alloc+0x336/0x440 [ 1705.692454] should_failslab+0x5/0x20 [ 1705.692882] kmem_cache_alloc+0x5b/0x310 [ 1705.693355] xas_alloc+0x336/0x440 [ 1705.693761] xas_create+0x34a/0x10d0 [ 1705.694205] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1705.694812] xas_store+0x8c/0x1c40 [ 1705.695255] __xa_store+0x164/0x2d0 [ 1705.695697] ? xa_delete_node+0x280/0x280 [ 1705.696196] ? trace_hardirqs_on+0x5b/0x180 [ 1705.696719] xa_store+0x31/0x50 [ 1705.697112] __io_uring_add_tctx_node+0x1cf/0x520 [ 1705.697698] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1705.698344] __do_sys_io_uring_enter+0x14de/0x1920 [ 1705.698915] ? lock_downgrade+0x6d0/0x6d0 [ 1705.699408] ? find_held_lock+0x2c/0x110 [ 1705.699882] ? io_submit_sqes+0x85c0/0x85c0 [ 1705.700405] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1705.700960] ? wait_for_completion_io+0x270/0x270 [ 1705.701533] ? rcu_read_lock_any_held+0x75/0xa0 [ 1705.702077] ? vfs_write+0x354/0xa70 [ 1705.702637] ? fput_many+0x2f/0x1a0 [ 1705.703085] ? ksys_write+0x1a9/0x260 [ 1705.703553] ? __ia32_sys_read+0xb0/0xb0 [ 1705.704053] do_syscall_64+0x33/0x40 [ 1705.704511] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1705.705117] RIP: 0033:0x7f9a776e8b19 [ 1705.705553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.707719] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1705.708607] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1705.709440] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1705.710297] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.711130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.711981] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:13:50 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000001500)={0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105940, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x8000000) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1400, 0x0) io_uring_enter(r4, 0x741b, 0x1908, 0x1, &(0x7f0000000340)={[0x5]}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd_index, 0x6, &(0x7f0000000240)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/4084, 0xff4}], 0x2, 0x0, 0x1, {0x0, r5}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x400, 0x0, 0x1, {0x0, r5}}, 0x5) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/leds', 0x111000, 0x24) io_uring_enter(r6, 0x68cb, 0xb204, 0x1, &(0x7f0000000300)={[0x7]}, 0x8) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:13:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000580)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) getxattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)=@random={'security.', '+-*[\x00'}, &(0x7f00000001c0)=""/22, 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xe542, 0x0) openat(r1, &(0x7f0000000300)='./file2\x00', 0x18000, 0x2) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="178824cbf37f"], 0x6, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo\x00') fspick(r3, &(0x7f0000001740)='./file0\x00', 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x1ff, 0x0, 0x0, 0x4, 0x1, {0x1, r4}}, 0xffff) open(&(0x7f0000000380)='./file1\x00', 0x80000, 0x80) openat(r3, &(0x7f0000000280)='./file0\x00', 0x40000, 0x90) sendfile(r0, r1, 0x0, 0x20d315) 20:13:50 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1705.988396] FAULT_INJECTION: forcing a failure. [ 1705.988396] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.989794] CPU: 0 PID: 9722 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1705.990693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.991574] Call Trace: [ 1705.991878] dump_stack+0x107/0x167 [ 1705.992277] should_fail.cold+0x5/0xa [ 1705.992692] ? create_object.isra.0+0x3a/0xa20 [ 1705.993201] should_failslab+0x5/0x20 [ 1705.993613] kmem_cache_alloc+0x5b/0x310 [ 1705.994063] ? mark_held_locks+0x9e/0xe0 [ 1705.994512] create_object.isra.0+0x3a/0xa20 [ 1705.994996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.995542] kmem_cache_alloc+0x159/0x310 [ 1705.996005] xas_alloc+0x336/0x440 [ 1705.996406] xas_create+0x34a/0x10d0 [ 1705.996820] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1705.997384] xas_store+0x8c/0x1c40 [ 1705.997795] __xa_store+0x164/0x2d0 [ 1705.998216] ? xa_delete_node+0x280/0x280 [ 1705.998691] ? trace_hardirqs_on+0x5b/0x180 [ 1705.999170] xa_store+0x31/0x50 [ 1705.999538] __io_uring_add_tctx_node+0x1cf/0x520 [ 1706.000078] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1706.000660] __do_sys_io_uring_enter+0x14de/0x1920 [ 1706.001216] ? lock_downgrade+0x6d0/0x6d0 [ 1706.001673] ? find_held_lock+0x2c/0x110 [ 1706.002134] ? io_submit_sqes+0x85c0/0x85c0 [ 1706.002617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1706.003146] ? wait_for_completion_io+0x270/0x270 [ 1706.003688] ? rcu_read_lock_any_held+0x75/0xa0 [ 1706.004208] ? vfs_write+0x354/0xa70 [ 1706.004621] ? fput_many+0x2f/0x1a0 [ 1706.005030] ? ksys_write+0x1a9/0x260 [ 1706.005448] ? __ia32_sys_read+0xb0/0xb0 [ 1706.005921] do_syscall_64+0x33/0x40 [ 1706.006350] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1706.006917] RIP: 0033:0x7f9a776e8b19 [ 1706.007335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1706.009329] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1706.010174] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1706.010958] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1706.011738] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1706.012531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1706.013312] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:04 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 20:14:04 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) 20:14:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x0, 0x989680}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:04 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/bluetooth', 0x10000, 0xa4) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x20) 20:14:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x3, 0x1, 0x3, 0x0, 0xa54, 0x4008, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0xff, 0x7fffffff}, 0x80, 0x100, 0x5, 0x5, 0xfffffffffffffff9, 0x3, 0xc3c, 0x0, 0x7, 0x0, 0xfffffffffffffffa}, r1, 0x9, r0, 0xd) 20:14:04 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:04 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1720.276187] FAULT_INJECTION: forcing a failure. [ 1720.276187] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.277639] CPU: 0 PID: 9747 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1720.278431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.279347] Call Trace: [ 1720.279656] dump_stack+0x107/0x167 [ 1720.280063] should_fail.cold+0x5/0xa [ 1720.280498] ? xas_alloc+0x336/0x440 [ 1720.280921] should_failslab+0x5/0x20 [ 1720.281341] kmem_cache_alloc+0x5b/0x310 [ 1720.281803] xas_alloc+0x336/0x440 [ 1720.282209] xas_create+0x34a/0x10d0 [ 1720.282653] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1720.283231] xas_store+0x8c/0x1c40 [ 1720.283635] __xa_store+0x164/0x2d0 [ 1720.284037] ? xa_delete_node+0x280/0x280 [ 1720.284504] ? trace_hardirqs_on+0x5b/0x180 [ 1720.284986] xa_store+0x31/0x50 [ 1720.285351] __io_uring_add_tctx_node+0x1cf/0x520 [ 1720.285882] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1720.286492] __do_sys_io_uring_enter+0x14de/0x1920 [ 1720.287035] ? lock_downgrade+0x6d0/0x6d0 [ 1720.287493] ? find_held_lock+0x2c/0x110 [ 1720.287946] ? io_submit_sqes+0x85c0/0x85c0 [ 1720.288425] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.288967] ? wait_for_completion_io+0x270/0x270 [ 1720.289511] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.290043] ? vfs_write+0x354/0xa70 [ 1720.290474] ? fput_many+0x2f/0x1a0 [ 1720.290885] ? ksys_write+0x1a9/0x260 [ 1720.291322] ? __ia32_sys_read+0xb0/0xb0 [ 1720.291792] do_syscall_64+0x33/0x40 [ 1720.292221] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1720.292799] RIP: 0033:0x7f27221a7b19 [ 1720.293206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.295236] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.296063] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1720.296849] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1720.297649] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.298466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.299262] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1720.303032] FAULT_INJECTION: forcing a failure. [ 1720.303032] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.304419] CPU: 0 PID: 9749 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1720.305174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.306195] Call Trace: [ 1720.306493] dump_stack+0x107/0x167 [ 1720.306899] should_fail.cold+0x5/0xa [ 1720.307318] ? create_object.isra.0+0x3a/0xa20 [ 1720.307820] should_failslab+0x5/0x20 [ 1720.308252] kmem_cache_alloc+0x5b/0x310 [ 1720.308703] ? mark_held_locks+0x9e/0xe0 [ 1720.309153] create_object.isra.0+0x3a/0xa20 [ 1720.309653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.310224] kmem_cache_alloc+0x159/0x310 [ 1720.310707] xas_alloc+0x336/0x440 [ 1720.311118] xas_create+0x34a/0x10d0 [ 1720.311546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1720.312122] xas_store+0x8c/0x1c40 [ 1720.312525] __xa_store+0x164/0x2d0 [ 1720.312929] ? xa_delete_node+0x280/0x280 [ 1720.313397] ? trace_hardirqs_on+0x5b/0x180 [ 1720.313884] xa_store+0x31/0x50 [ 1720.314245] __io_uring_add_tctx_node+0x1cf/0x520 [ 1720.314798] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1720.315389] __do_sys_io_uring_enter+0x14de/0x1920 [ 1720.315942] ? lock_downgrade+0x6d0/0x6d0 [ 1720.316399] ? find_held_lock+0x2c/0x110 [ 1720.316843] ? io_submit_sqes+0x85c0/0x85c0 [ 1720.317318] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.317861] ? wait_for_completion_io+0x270/0x270 [ 1720.318402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.318924] ? vfs_write+0x354/0xa70 [ 1720.319335] ? fput_many+0x2f/0x1a0 [ 1720.319747] ? ksys_write+0x1a9/0x260 [ 1720.320168] ? __ia32_sys_read+0xb0/0xb0 [ 1720.320637] do_syscall_64+0x33/0x40 [ 1720.321053] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1720.321629] RIP: 0033:0x7f818218db19 [ 1720.322033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.324077] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.324932] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1720.325727] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1720.326527] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.327308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.328099] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:14:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x547a42, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1720.347472] FAULT_INJECTION: forcing a failure. [ 1720.347472] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.350193] CPU: 1 PID: 9751 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1720.351947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.354018] Call Trace: [ 1720.354640] dump_stack+0x107/0x167 [ 1720.355393] should_fail.cold+0x5/0xa [ 1720.356186] ? xas_alloc+0x336/0x440 [ 1720.356926] should_failslab+0x5/0x20 [ 1720.357721] kmem_cache_alloc+0x5b/0x310 [ 1720.358561] xas_alloc+0x336/0x440 [ 1720.359312] xas_create+0x34a/0x10d0 [ 1720.360072] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1720.361172] xas_store+0x8c/0x1c40 [ 1720.361896] __xa_store+0x164/0x2d0 [ 1720.362674] ? xa_delete_node+0x280/0x280 [ 1720.363538] ? trace_hardirqs_on+0x5b/0x180 [ 1720.364428] xa_store+0x31/0x50 [ 1720.365109] __io_uring_add_tctx_node+0x1cf/0x520 [ 1720.366067] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1720.367206] __do_sys_io_uring_enter+0x14de/0x1920 [ 1720.368210] ? lock_downgrade+0x6d0/0x6d0 [ 1720.369185] ? find_held_lock+0x2c/0x110 [ 1720.369988] ? io_submit_sqes+0x85c0/0x85c0 [ 1720.370918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.371897] ? wait_for_completion_io+0x270/0x270 [ 1720.372912] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.373835] ? vfs_write+0x354/0xa70 [ 1720.374630] ? fput_many+0x2f/0x1a0 [ 1720.375366] ? ksys_write+0x1a9/0x260 [ 1720.376164] ? __ia32_sys_read+0xb0/0xb0 [ 1720.377012] do_syscall_64+0x33/0x40 [ 1720.377779] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1720.378843] RIP: 0033:0x7f9a776e8b19 [ 1720.379611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.383379] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.384928] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1720.386416] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1720.387867] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.389333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.390793] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x80000001) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x4, 0x2, 0x0, 0x5, 0x14, 0x0, {0x1, r6}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r7, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x9, 0x7, 0xa2e, 0x3, 0x3e, 0x6, 0x294, 0x40, 0x18e, 0xff, 0x5, 0x38, 0x1, 0x5, 0x2, 0x1}, [{0x3, 0x8, 0x0, 0x100, 0xfff, 0x4ba, 0x100000001, 0x1f6c6e61}, {0x70000000, 0xfffffff7, 0x3f, 0x7fff, 0x4, 0x24b6, 0x2, 0x3ff}], "a803af9b66c79dc2a93e628df812c3a3fcf3fe8b47d9119a2f6d1a9a5758f633ce3a05c2fb7425d687c2eca17ab85fc234489670ef19ba0fd0638f323b617f41f938684807c2cac0507c412dbfd40c1538f44ed92882d9afc7ff259af9ae0783b0e94eabb12249bbcbfc78298164225e8e801c1fdbb8e5398e4e06e6aa20ce24f8f90512e782549af591789aa78b0caf6905a02a3d18781e365f98e92bed7061bed893e3"}, 0x154) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:04 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:04 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = dup(r3) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000240)={{r5}, {@val, @actul_num={@val=0x2d, 0x9, 0x45}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="38a132e3619b54c83356000800", @ANYRES16=r7, @ANYBLOB="05022dbd7000fcdbdf25210000000a00f50050505050505000000a00f500d6716cac140f0000060098000000000004008700"], 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000004) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xf4, r7, 0x209, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x2}, @broadcast, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x7}, {0x9, 0x9}, "424701534f83ff333d4d0c93da9d21132128bc91b2793bade58ba992b5658a367bf6598cd02ad7c4fc51209daa71182d6f1e97820e2c1209330707761b299ae682f6af166e350558ddc9214750de8e28fd9fd77b80daecf780647122de03d2cf2faba81f2aea423112147e09c8a7f0917e9f274c54104f5ec2d66dd2123e167e"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000091}, 0x880) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:14:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@local, @multicast1, r3}, 0xc) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48402004}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000880)={0x414, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x61bf, 0x2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x80000000, 0x0, 0x6, 0x1}, 0x80000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x7f, 0x0, 0x8, 0x0, 0x3000, 0x38, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86b, 0x4, @perf_bp={&(0x7f0000000440), 0x2}, 0x0, 0x9, 0xc01, 0x4, 0x1, 0x3, 0x5, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xd, r1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r6 = fsmount(r0, 0x1, 0x71) openat(r6, &(0x7f0000000680)='./file0\x00', 0x1, 0x100) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB='\b\x00;\x00', @ANYRES32=r7, @ANYBLOB="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab70000003e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e555587ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b"], 0x1e8}}, 0x4008040) 20:14:04 executing program 6: r0 = syz_io_uring_setup(0x4c7f, &(0x7f00000006c0)={0x0, 0x0, 0x20, 0x1, 0x205, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20d315) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000680)=0xa643, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) readv(r7, &(0x7f0000000600)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/232, 0xe8}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1720.716916] FAULT_INJECTION: forcing a failure. [ 1720.716916] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.718185] CPU: 0 PID: 9781 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1720.718924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.719815] Call Trace: [ 1720.720110] dump_stack+0x107/0x167 [ 1720.720509] should_fail.cold+0x5/0xa [ 1720.720923] ? create_object.isra.0+0x3a/0xa20 [ 1720.721423] should_failslab+0x5/0x20 [ 1720.721843] kmem_cache_alloc+0x5b/0x310 [ 1720.722288] ? mark_held_locks+0x9e/0xe0 [ 1720.722758] create_object.isra.0+0x3a/0xa20 [ 1720.723231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.723785] kmem_cache_alloc+0x159/0x310 [ 1720.724243] xas_alloc+0x336/0x440 [ 1720.724634] xas_create+0x34a/0x10d0 [ 1720.725054] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1720.725619] xas_store+0x8c/0x1c40 [ 1720.726025] __xa_store+0x164/0x2d0 [ 1720.726434] ? xa_delete_node+0x280/0x280 [ 1720.726894] ? trace_hardirqs_on+0x5b/0x180 [ 1720.727373] xa_store+0x31/0x50 [ 1720.727738] __io_uring_add_tctx_node+0x1cf/0x520 [ 1720.728279] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1720.728862] __do_sys_io_uring_enter+0x14de/0x1920 [ 1720.729407] ? lock_downgrade+0x6d0/0x6d0 [ 1720.729868] ? find_held_lock+0x2c/0x110 [ 1720.730310] ? io_submit_sqes+0x85c0/0x85c0 [ 1720.730809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.731346] ? wait_for_completion_io+0x270/0x270 [ 1720.731875] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.732384] ? vfs_write+0x354/0xa70 [ 1720.732796] ? fput_many+0x2f/0x1a0 [ 1720.733201] ? ksys_write+0x1a9/0x260 [ 1720.733613] ? __ia32_sys_read+0xb0/0xb0 [ 1720.734072] do_syscall_64+0x33/0x40 [ 1720.734495] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1720.735064] RIP: 0033:0x7f9a776e8b19 [ 1720.735469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.737453] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.738281] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1720.739065] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1720.739837] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.740617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.741404] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:22 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 20:14:22 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:22 executing program 1: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x1d, 0x37, 0x0, 0x10, 0x0, 0x0, 0x5, 0xa6, 0xffffffffffffffff}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x126, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x4, 0x8f6}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000500)={0x0, 0x37, 0x9, 0x15, 0x0, 0x7fff, 0x4, 0xb3, 0x1}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x444dc0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20004096) dup2(0xffffffffffffffff, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='[^.,+\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a087092", 0x6e, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000400)=0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)=ANY=[]) close(0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x1001, 0x2, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) 20:14:22 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:22 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 20:14:22 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000840)=0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000000)={@local, r11}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002800)={0x564, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d70}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72b}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xccaf}}, {0x8}}}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000880)=ANY=[@ANYBLOB="d40a0000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004006a0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f646500000000ff48d18c78e3144fe154da1f3a9db57eff00b30000000000000000000000000000004f123541b509000000000000000000050003000500000025000400726f756e64726f62696e000008000100", @ANYRES32=0x0, @ANYBLOB="d00002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400709780e0fb5c0000ff0000067900000009000102370100000100c1fa0500000008000100", @ANYRES32=0x0, @ANYBLOB="dc010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001d85a14ba006177fcf57d25639630740000000000000000000000000000ff00000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400c0ffffff080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000008040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0300003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f00002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff007f819b8e00000700c57f08000000030006070200000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="580202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0xad4}, 0x1, 0x0, 0x0, 0x1}, 0x841) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:14:22 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) [ 1738.501765] FAULT_INJECTION: forcing a failure. [ 1738.501765] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.503461] CPU: 0 PID: 9807 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1738.505464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.507844] Call Trace: [ 1738.508607] dump_stack+0x107/0x167 [ 1738.509667] should_fail.cold+0x5/0xa [ 1738.510793] ? xas_alloc+0x336/0x440 [ 1738.511726] should_failslab+0x5/0x20 [ 1738.512582] kmem_cache_alloc+0x5b/0x310 [ 1738.513507] xas_alloc+0x336/0x440 [ 1738.514309] xas_create+0x34a/0x10d0 [ 1738.515171] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1738.516322] xas_store+0x8c/0x1c40 [ 1738.517111] __xa_store+0x164/0x2d0 [ 1738.517904] ? xa_delete_node+0x280/0x280 [ 1738.518811] ? trace_hardirqs_on+0x5b/0x180 [ 1738.519755] xa_store+0x31/0x50 [ 1738.520481] __io_uring_add_tctx_node+0x1cf/0x520 [ 1738.521532] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1738.522705] __do_sys_io_uring_enter+0x14de/0x1920 [ 1738.523775] ? lock_downgrade+0x6d0/0x6d0 [ 1738.524670] ? find_held_lock+0x2c/0x110 [ 1738.525575] ? io_submit_sqes+0x85c0/0x85c0 [ 1738.526522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1738.527590] ? wait_for_completion_io+0x270/0x270 [ 1738.528652] ? rcu_read_lock_any_held+0x75/0xa0 [ 1738.529659] ? vfs_write+0x354/0xa70 [ 1738.530475] ? fput_many+0x2f/0x1a0 [ 1738.531381] ? ksys_write+0x1a9/0x260 [ 1738.532190] ? __ia32_sys_read+0xb0/0xb0 [ 1738.533190] do_syscall_64+0x33/0x40 [ 1738.533982] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1738.535246] RIP: 0033:0x7f818218db19 [ 1738.536036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.540519] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1738.542109] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1738.543844] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1738.545372] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.547017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.548516] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1738.556600] FAULT_INJECTION: forcing a failure. [ 1738.556600] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.558874] CPU: 0 PID: 9808 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1738.560342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.561984] Call Trace: [ 1738.562510] dump_stack+0x107/0x167 [ 1738.563267] should_fail.cold+0x5/0xa [ 1738.564034] ? create_object.isra.0+0x3a/0xa20 [ 1738.564953] should_failslab+0x5/0x20 [ 1738.565711] kmem_cache_alloc+0x5b/0x310 [ 1738.566521] ? mark_held_locks+0x9e/0xe0 [ 1738.567365] create_object.isra.0+0x3a/0xa20 [ 1738.568250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1738.569291] kmem_cache_alloc+0x159/0x310 [ 1738.570136] xas_alloc+0x336/0x440 [ 1738.570900] xas_create+0x34a/0x10d0 [ 1738.571662] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1738.572726] xas_store+0x8c/0x1c40 [ 1738.573459] __xa_store+0x164/0x2d0 [ 1738.574207] ? xa_delete_node+0x280/0x280 [ 1738.575063] ? trace_hardirqs_on+0x5b/0x180 [ 1738.575950] xa_store+0x31/0x50 [ 1738.576627] __io_uring_add_tctx_node+0x1cf/0x520 [ 1738.577611] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1738.578723] __do_sys_io_uring_enter+0x14de/0x1920 [ 1738.579728] ? lock_downgrade+0x6d0/0x6d0 [ 1738.580569] ? find_held_lock+0x2c/0x110 [ 1738.581397] ? io_submit_sqes+0x85c0/0x85c0 [ 1738.582276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1738.583282] ? wait_for_completion_io+0x270/0x270 [ 1738.584261] ? rcu_read_lock_any_held+0x75/0xa0 [ 1738.585213] ? vfs_write+0x354/0xa70 [ 1738.585971] ? fput_many+0x2f/0x1a0 [ 1738.586737] ? ksys_write+0x1a9/0x260 [ 1738.587510] ? __ia32_sys_read+0xb0/0xb0 [ 1738.588352] do_syscall_64+0x33/0x40 [ 1738.589118] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1738.590150] RIP: 0033:0x7f27221a7b19 [ 1738.590936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.594669] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1738.596217] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1738.597672] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1738.599153] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.600604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.602040] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1738.612783] FAULT_INJECTION: forcing a failure. [ 1738.612783] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.615178] CPU: 0 PID: 9818 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1738.616569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1738.618250] Call Trace: [ 1738.618833] dump_stack+0x107/0x167 [ 1738.619575] should_fail.cold+0x5/0xa [ 1738.620437] ? xas_alloc+0x336/0x440 [ 1738.621188] should_failslab+0x5/0x20 [ 1738.621958] kmem_cache_alloc+0x5b/0x310 [ 1738.622810] xas_alloc+0x336/0x440 [ 1738.623530] xas_create+0x34a/0x10d0 [ 1738.624302] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1738.625362] xas_store+0x8c/0x1c40 [ 1738.626100] __xa_store+0x164/0x2d0 [ 1738.626879] ? xa_delete_node+0x280/0x280 [ 1738.627750] ? trace_hardirqs_on+0x5b/0x180 [ 1738.628640] xa_store+0x31/0x50 [ 1738.629320] __io_uring_add_tctx_node+0x1cf/0x520 [ 1738.630289] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1738.631396] __do_sys_io_uring_enter+0x14de/0x1920 [ 1738.632386] ? lock_downgrade+0x6d0/0x6d0 [ 1738.633231] ? find_held_lock+0x2c/0x110 [ 1738.634052] ? io_submit_sqes+0x85c0/0x85c0 [ 1738.634974] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1738.635940] ? wait_for_completion_io+0x270/0x270 [ 1738.636908] ? rcu_read_lock_any_held+0x75/0xa0 [ 1738.637844] ? vfs_write+0x354/0xa70 [ 1738.638605] ? fput_many+0x2f/0x1a0 [ 1738.639351] ? ksys_write+0x1a9/0x260 [ 1738.640110] ? __ia32_sys_read+0xb0/0xb0 [ 1738.640946] do_syscall_64+0x33/0x40 [ 1738.641700] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1738.642755] RIP: 0033:0x7f9a776e8b19 [ 1738.643506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.647288] RSP: 002b:00007f9a74c1c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1738.648840] RAX: ffffffffffffffda RBX: 00007f9a777fc0e0 RCX: 00007f9a776e8b19 [ 1738.650289] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1738.651761] RBP: 00007f9a74c1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.653215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.654692] R13: 00007fff86d8f12f R14: 00007f9a74c1c300 R15: 0000000000022000 20:14:23 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) getsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5e6}, 0x0, 0x40000000000, r5, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0x7}], 0x8c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r1 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000140)="fbc85679996339fce0b47882062347d5998a0328e710f2191576989f09536b37d1f43763b03f7ab392c2889e42074111ea2bbf4f7cbd9e37a5890752206b266658cf809ac40db1066db5845efed3f59cb9beffc49290077200b10b1d39e46752b9e419a97b4be6efc61a758f85d64b13ccffcbaafa0205f7bcc2e7db4a5f59afd36189a0b130dbbf30a6facf25fead57f5f53760a427846067f00a97d819bb43dd66d40e068c2353598e8a14787355e7e319a59a134aa2d5fa8edde261ec143383afc7c9f709d129f6dc", 0xca, 0x8}, {&(0x7f0000000340)="f898eb368e7795297e44dc8b390229a6831c3e3ae1cfdb839be410469a10451dc789766cca7ecbea85271a5f2043cdc615e40f36aa37f52416193ace81ea018b26ac36ff088f44192cde35c489d2596290adf7dc5fe46c0ee1088d5bd9aedd2286eccdc4f85dc9941f11cad0a8526d93fd36e5d563a0576e719a63e2a12a5c4b462b1e0d3614516536c42b8c63da771c098ab0a3a5af14ba62b0ee750ce39221b4d24c337d0c08a8c16563a7cd567d10705bc311e83c5483f2bc0b8ff8ae31f13086c461e237688e5d13a2ae1c1854ecb31797082c", 0xd5, 0x9}, {&(0x7f0000000240)="ca15ff285d8b409a5616f6c980530970e741ce4855346f161fdcefe4f33f85979ba8daf4fadd3f9958faa27b5f044e5d0a47d697b7680bb7a9a40e66b1735a8decd702e336b9a8f99a39f431", 0x4c, 0x3}], 0x10000, &(0x7f00000004c0)={[{@check_strict}, {@map_acorn}, {@nocompress}], [{@fowner_gt={'fowner>', 0xee01}}, {@fowner_lt}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) utimensat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f00000005c0)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x100) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 20:14:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:23 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r6 = accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000380)=@req={0x28, &(0x7f0000000340)={'erspan0\x00', @ifru_ivalue}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x1) 20:14:23 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0x141400, 0x0) copy_file_range(r5, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:14:23 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:23 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x9}, 0x2006, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_notify(r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/anycast6\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r0, 0x40, 0x0, 0x7b38, 0x7}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:23 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x10, 0x409, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0x7d, 0x0, 0x0, @u64}]}]}, 0x30}}, 0x0) sendfile(r0, r2, &(0x7f0000000400)=0x1, 0x10000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f0000000100)) r6 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x7, 0xaaaaaaaaaaaacdc, &(0x7f0000000340)=[{&(0x7f0000000180)="1d23de7449ee513d0fbbb59dcf0b1bbac60fe6674c12730f11d2e4a1e5f805fa4b51984ac5bc8ca2939f684ddf22e6602e5bd13a291e12eb168fd3a24106088d1c278eafb335beb6e01629099e679c512f7219aa2f120c110a54e373ea9d3aaeb23dde64ff57a34a6b52aa10e55013c177ccf8a58eb34a2f8f5a64e95da56e9e9bb1de581df6f59867fe2d2005abe10959b04704", 0x94, 0x101}], 0x14041, &(0x7f0000000380)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x2}}, {@map_normal}, {@unhide}, {@block}], [{@measure}]}) dup2(r5, r6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000500)=0x1, 0x4) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) read$hiddev(r1, &(0x7f0000000280)=""/175, 0xaf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0x3e6b48c2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1739.007429] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1739.119504] FAULT_INJECTION: forcing a failure. [ 1739.119504] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.122004] CPU: 0 PID: 9847 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1739.123567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.125439] Call Trace: [ 1739.126057] dump_stack+0x107/0x167 [ 1739.126921] should_fail.cold+0x5/0xa [ 1739.127802] ? ___slab_alloc+0x155/0x700 [ 1739.128726] ? create_object.isra.0+0x3a/0xa20 [ 1739.129778] should_failslab+0x5/0x20 [ 1739.130649] kmem_cache_alloc+0x5b/0x310 [ 1739.131585] create_object.isra.0+0x3a/0xa20 [ 1739.132595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.133756] kmem_cache_alloc+0x159/0x310 [ 1739.134739] xas_alloc+0x336/0x440 [ 1739.135573] xas_create+0x34a/0x10d0 [ 1739.136460] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1739.137664] xas_store+0x8c/0x1c40 [ 1739.138512] __xa_store+0x164/0x2d0 [ 1739.139357] ? xa_delete_node+0x280/0x280 [ 1739.140329] ? trace_hardirqs_on+0x5b/0x180 [ 1739.141334] xa_store+0x31/0x50 [ 1739.142096] __io_uring_add_tctx_node+0x1cf/0x520 [ 1739.143226] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1739.144450] __do_sys_io_uring_enter+0x14de/0x1920 [ 1739.145577] ? lock_downgrade+0x6d0/0x6d0 [ 1739.146527] ? find_held_lock+0x2c/0x110 [ 1739.147481] ? io_submit_sqes+0x85c0/0x85c0 [ 1739.148489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.149603] ? wait_for_completion_io+0x270/0x270 [ 1739.150711] ? rcu_read_lock_any_held+0x75/0xa0 [ 1739.151770] ? vfs_write+0x354/0xa70 [ 1739.152635] ? fput_many+0x2f/0x1a0 [ 1739.153470] ? ksys_write+0x1a9/0x260 [ 1739.154345] ? __ia32_sys_read+0xb0/0xb0 [ 1739.155324] do_syscall_64+0x33/0x40 [ 1739.156179] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1739.157346] RIP: 0033:0x7f9a776e8b19 [ 1739.158199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.162365] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1739.164095] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1739.165709] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1739.167336] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.168943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.170553] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:23 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 20:14:23 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) syz_io_uring_setup(0x14f, &(0x7f0000000580)={0x0, 0xfdbc, 0x8, 0x3, 0x173}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x3, 0x1, &(0x7f0000000440)=[{&(0x7f00000003c0)="66b179959859e3c3050d89b59c48df07e1ef62536823f730b0eaacb2431be07e70072478a644134f7a9e6f3ed5d33407e8367471917ba01fe6d58a693e9bcd7813bf61d94feec5972a5f79c3fb1b3113", 0x50, 0x8}], 0x20000, &(0x7f0000000480)={[{@noacl}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@errors_continue}, {@nobarrier}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'-!@@(!'}}, {@obj_role={'obj_role', 0x3d, '-^)'}}]}) openat(r5, &(0x7f0000000540)='./file1\x00', 0x400, 0x18) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000200)={0x3ff, 0x1}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:23 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fallocate(r4, 0x20, 0x100, 0x401) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_setup(0x673c, &(0x7f00000001c0)={0x0, 0xdae4, 0x8, 0x0, 0x3cc, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 20:14:23 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 20:14:23 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) [ 1739.486829] FAULT_INJECTION: forcing a failure. [ 1739.486829] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.489076] CPU: 0 PID: 9868 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1739.490389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.491996] Call Trace: [ 1739.492501] dump_stack+0x107/0x167 [ 1739.493205] should_fail.cold+0x5/0xa [ 1739.493930] ? xas_alloc+0x336/0x440 [ 1739.494667] should_failslab+0x5/0x20 [ 1739.495397] kmem_cache_alloc+0x5b/0x310 [ 1739.496178] xas_alloc+0x336/0x440 [ 1739.496832] xas_create+0x34a/0x10d0 [ 1739.497546] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1739.498501] xas_store+0x8c/0x1c40 [ 1739.499201] __xa_store+0x164/0x2d0 [ 1739.499883] ? xa_delete_node+0x280/0x280 [ 1739.500690] ? trace_hardirqs_on+0x5b/0x180 [ 1739.501493] xa_store+0x31/0x50 [ 1739.502108] __io_uring_add_tctx_node+0x1cf/0x520 [ 1739.502992] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1739.504005] __do_sys_io_uring_enter+0x14de/0x1920 [ 1739.504906] ? lock_downgrade+0x6d0/0x6d0 [ 1739.505657] ? find_held_lock+0x2c/0x110 [ 1739.506431] ? io_submit_sqes+0x85c0/0x85c0 [ 1739.507248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.508150] ? wait_for_completion_io+0x270/0x270 [ 1739.509036] ? rcu_read_lock_any_held+0x75/0xa0 [ 1739.509919] ? vfs_write+0x354/0xa70 [ 1739.510620] ? fput_many+0x2f/0x1a0 [ 1739.511257] FAULT_INJECTION: forcing a failure. [ 1739.511257] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.511316] ? ksys_write+0x1a9/0x260 [ 1739.513743] ? __ia32_sys_read+0xb0/0xb0 [ 1739.514514] do_syscall_64+0x33/0x40 [ 1739.515231] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1739.516169] RIP: 0033:0x7f27221a7b19 [ 1739.516851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.520201] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1739.521594] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1739.522903] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1739.524210] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.525535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.526848] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1739.528178] CPU: 1 PID: 9869 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1739.529233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1739.530480] Call Trace: [ 1739.530893] dump_stack+0x107/0x167 [ 1739.531441] should_fail.cold+0x5/0xa [ 1739.532021] ? create_object.isra.0+0x3a/0xa20 [ 1739.532709] should_failslab+0x5/0x20 [ 1739.533295] kmem_cache_alloc+0x5b/0x310 [ 1739.534044] ? mark_held_locks+0x9e/0xe0 [ 1739.534851] create_object.isra.0+0x3a/0xa20 [ 1739.535975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1739.537493] kmem_cache_alloc+0x159/0x310 [ 1739.538570] xas_alloc+0x336/0x440 [ 1739.539507] xas_create+0x34a/0x10d0 [ 1739.540495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1739.541875] xas_store+0x8c/0x1c40 [ 1739.542820] __xa_store+0x164/0x2d0 [ 1739.543756] ? xa_delete_node+0x280/0x280 [ 1739.544853] ? trace_hardirqs_on+0x5b/0x180 [ 1739.546024] xa_store+0x31/0x50 [ 1739.546792] __io_uring_add_tctx_node+0x1cf/0x520 [ 1739.547829] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1739.548912] __do_sys_io_uring_enter+0x14de/0x1920 [ 1739.549921] ? lock_downgrade+0x6d0/0x6d0 [ 1739.550773] ? find_held_lock+0x2c/0x110 [ 1739.551628] ? io_submit_sqes+0x85c0/0x85c0 [ 1739.552522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1739.553574] ? wait_for_completion_io+0x270/0x270 [ 1739.554606] ? rcu_read_lock_any_held+0x75/0xa0 [ 1739.555586] ? vfs_write+0x354/0xa70 [ 1739.556352] ? fput_many+0x2f/0x1a0 [ 1739.557102] ? ksys_write+0x1a9/0x260 [ 1739.557928] ? __ia32_sys_read+0xb0/0xb0 [ 1739.558802] do_syscall_64+0x33/0x40 [ 1739.559572] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1739.560690] RIP: 0033:0x7f818218db19 [ 1739.561461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.565554] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1739.567172] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1739.568631] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1739.570101] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1739.571568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.573023] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1739.855124] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 20:14:40 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:40 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) 20:14:40 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 20:14:40 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000180)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 20:14:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:40 executing program 6: r0 = syz_io_uring_setup(0x23, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000380)={0x20000001}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x10001, 0x0) io_uring_enter(r4, 0x9a3, 0x81d5, 0x1, &(0x7f0000000000)={[0x2]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x1c8110, r6, 0x8000000) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') sendfile(r5, r7, &(0x7f0000000240)=0x1, 0x8) 20:14:40 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0x3f, 0x1f, 0x7, 0x0, 0x3d2, 0x4000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x22a, 0x4, 0x5, 0xf, 0x5, 0x8, 0x632, 0x0, 0x1ff, 0x0, 0x3f}, 0x0, 0x1, 0xffffffffffffffff, 0x1) 20:14:40 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1755.913686] audit: type=1400 audit(1695932080.322:40): avc: denied { relabelto } for pid=9881 comm="syz-executor.1" name="UNIX" dev="sockfs" ino=34697 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=unix_stream_socket permissive=1 [ 1755.940278] FAULT_INJECTION: forcing a failure. [ 1755.940278] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.942813] CPU: 0 PID: 9898 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1755.944293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1755.946013] Call Trace: [ 1755.946574] dump_stack+0x107/0x167 [ 1755.947358] should_fail.cold+0x5/0xa [ 1755.948139] ? xas_alloc+0x336/0x440 [ 1755.948943] should_failslab+0x5/0x20 [ 1755.949757] kmem_cache_alloc+0x5b/0x310 [ 1755.950603] xas_alloc+0x336/0x440 [ 1755.951372] xas_create+0x34a/0x10d0 [ 1755.952162] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1755.953298] xas_store+0x8c/0x1c40 [ 1755.954041] __xa_store+0x164/0x2d0 [ 1755.954807] ? xa_delete_node+0x280/0x280 [ 1755.955676] ? trace_hardirqs_on+0x5b/0x180 [ 1755.956593] xa_store+0x31/0x50 [ 1755.957290] __io_uring_add_tctx_node+0x1cf/0x520 [ 1755.958285] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1755.959401] __do_sys_io_uring_enter+0x14de/0x1920 [ 1755.960426] ? lock_downgrade+0x6d0/0x6d0 [ 1755.961289] ? find_held_lock+0x2c/0x110 [ 1755.962123] ? io_submit_sqes+0x85c0/0x85c0 [ 1755.963035] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1755.964033] ? wait_for_completion_io+0x270/0x270 [ 1755.965040] ? rcu_read_lock_any_held+0x75/0xa0 [ 1755.965996] ? vfs_write+0x354/0xa70 [ 1755.966771] ? fput_many+0x2f/0x1a0 [ 1755.967547] ? ksys_write+0x1a9/0x260 [ 1755.968349] ? __ia32_sys_read+0xb0/0xb0 [ 1755.969215] do_syscall_64+0x33/0x40 [ 1755.969979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1755.971046] RIP: 0033:0x7f818218db19 [ 1755.971816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.975624] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1755.977208] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1755.978662] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1755.980135] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.981610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.983095] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1755.989038] FAULT_INJECTION: forcing a failure. [ 1755.989038] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.991532] CPU: 0 PID: 9900 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1755.992998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1755.994695] Call Trace: [ 1755.995273] dump_stack+0x107/0x167 [ 1755.996018] should_fail.cold+0x5/0xa [ 1755.996818] ? create_object.isra.0+0x3a/0xa20 [ 1755.997762] should_failslab+0x5/0x20 [ 1755.998565] kmem_cache_alloc+0x5b/0x310 [ 1755.999413] ? mark_held_locks+0x9e/0xe0 [ 1756.000265] create_object.isra.0+0x3a/0xa20 [ 1756.001167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1756.002220] kmem_cache_alloc+0x159/0x310 [ 1756.003090] xas_alloc+0x336/0x440 [ 1756.003829] xas_create+0x34a/0x10d0 [ 1756.004622] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.005696] xas_store+0x8c/0x1c40 [ 1756.006456] __xa_store+0x164/0x2d0 [ 1756.007221] ? xa_delete_node+0x280/0x280 [ 1756.008070] ? trace_hardirqs_on+0x5b/0x180 [ 1756.008974] xa_store+0x31/0x50 [ 1756.009677] __io_uring_add_tctx_node+0x1cf/0x520 [ 1756.010820] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1756.011926] __do_sys_io_uring_enter+0x14de/0x1920 [ 1756.012941] ? lock_downgrade+0x6d0/0x6d0 [ 1756.013802] ? find_held_lock+0x2c/0x110 [ 1756.014647] ? io_submit_sqes+0x85c0/0x85c0 [ 1756.015662] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.016894] ? wait_for_completion_io+0x270/0x270 [ 1756.018100] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.019286] ? vfs_write+0x354/0xa70 [ 1756.020132] ? fput_many+0x2f/0x1a0 [ 1756.020898] ? ksys_write+0x1a9/0x260 [ 1756.021722] ? __ia32_sys_read+0xb0/0xb0 [ 1756.022636] do_syscall_64+0x33/0x40 [ 1756.023432] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.024561] RIP: 0033:0x7f27221a7b19 [ 1756.025386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.029421] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1756.031099] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1756.032606] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1756.034071] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.035550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.037007] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1756.068456] FAULT_INJECTION: forcing a failure. [ 1756.068456] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.070978] CPU: 1 PID: 9901 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1756.072449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.074182] Call Trace: [ 1756.074751] dump_stack+0x107/0x167 [ 1756.075581] should_fail.cold+0x5/0xa [ 1756.076429] ? xas_alloc+0x336/0x440 [ 1756.077253] should_failslab+0x5/0x20 [ 1756.078092] kmem_cache_alloc+0x5b/0x310 [ 1756.079027] xas_alloc+0x336/0x440 [ 1756.079770] xas_create+0x34a/0x10d0 [ 1756.080610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.081741] xas_store+0x8c/0x1c40 [ 1756.082632] __xa_store+0x164/0x2d0 [ 1756.083401] ? xa_delete_node+0x280/0x280 [ 1756.084256] ? trace_hardirqs_on+0x5b/0x180 [ 1756.085170] xa_store+0x31/0x50 [ 1756.085849] __io_uring_add_tctx_node+0x1cf/0x520 [ 1756.086873] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1756.087957] __do_sys_io_uring_enter+0x14de/0x1920 [ 1756.088989] ? lock_downgrade+0x6d0/0x6d0 [ 1756.089832] ? find_held_lock+0x2c/0x110 [ 1756.090702] ? io_submit_sqes+0x85c0/0x85c0 [ 1756.091600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.092647] ? wait_for_completion_io+0x270/0x270 [ 1756.093633] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.094590] ? vfs_write+0x354/0xa70 [ 1756.095363] ? fput_many+0x2f/0x1a0 [ 1756.096106] ? ksys_write+0x1a9/0x260 [ 1756.096886] ? __ia32_sys_read+0xb0/0xb0 [ 1756.097730] do_syscall_64+0x33/0x40 [ 1756.098490] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.099540] RIP: 0033:0x7f9a776e8b19 [ 1756.100299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.104052] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1756.105598] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1756.107061] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1756.108510] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.109955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.111419] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x2000, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x3ff}]}, 0x34}}, 0x0) 20:14:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:40 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1756.248187] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1756.368693] FAULT_INJECTION: forcing a failure. [ 1756.368693] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.371298] CPU: 0 PID: 9915 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1756.372738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.374417] Call Trace: [ 1756.374989] dump_stack+0x107/0x167 [ 1756.375738] should_fail.cold+0x5/0xa [ 1756.376532] ? ___slab_alloc+0x155/0x700 [ 1756.377363] ? create_object.isra.0+0x3a/0xa20 [ 1756.378311] should_failslab+0x5/0x20 [ 1756.379104] kmem_cache_alloc+0x5b/0x310 [ 1756.379963] create_object.isra.0+0x3a/0xa20 [ 1756.380871] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1756.381926] kmem_cache_alloc+0x159/0x310 [ 1756.382806] xas_alloc+0x336/0x440 [ 1756.383554] xas_create+0x34a/0x10d0 [ 1756.384356] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.385447] xas_store+0x8c/0x1c40 [ 1756.386218] __xa_store+0x164/0x2d0 [ 1756.386992] ? xa_delete_node+0x280/0x280 [ 1756.387869] ? trace_hardirqs_on+0x5b/0x180 [ 1756.388773] xa_store+0x31/0x50 [ 1756.389460] __io_uring_add_tctx_node+0x1cf/0x520 [ 1756.390451] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1756.391568] __do_sys_io_uring_enter+0x14de/0x1920 [ 1756.392592] ? lock_downgrade+0x6d0/0x6d0 [ 1756.393441] ? find_held_lock+0x2c/0x110 [ 1756.394292] ? io_submit_sqes+0x85c0/0x85c0 [ 1756.395208] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.396211] ? wait_for_completion_io+0x270/0x270 [ 1756.397205] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.398161] ? vfs_write+0x354/0xa70 [ 1756.398957] ? fput_many+0x2f/0x1a0 [ 1756.399714] ? ksys_write+0x1a9/0x260 [ 1756.400502] ? __ia32_sys_read+0xb0/0xb0 [ 1756.401373] do_syscall_64+0x33/0x40 [ 1756.402146] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.403207] RIP: 0033:0x7f9a776e8b19 [ 1756.403989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.407706] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1756.409273] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1756.410716] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1756.412177] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.413635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.415084] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:14:40 executing program 1: r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) inotify_rm_watch(r0, r1) read(r0, &(0x7f0000000280)=""/4096, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) r5 = creat(&(0x7f00000000c0)='./file1/file0\x00', 0x162) recvmsg$unix(r5, &(0x7f00000013c0)={&(0x7f0000000100), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000180)=""/207, 0xcf}], 0x1, &(0x7f00000012c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x40000000) 20:14:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x26a55000) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x16d142, 0x41) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd=r1, 0x8, &(0x7f0000000440)="5163b88e0d2a841a70b0de10cdb3ad41f74fa1199fb7ea377e71c13783fae0045a357834fde56fcb7bc43977501729920e5d65d746be1f1b4253dd4d2ddb92e219c4c6768643f1ada11f01af1ca8b1753037267926d5e75dd22ec173b83e6bfada52ebf4cd96a5229a14a3f489422dde360e", 0x72, 0x18, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/306]) fallocate(r4, 0x0, 0x0, 0x8800000) r5 = dup2(r4, r1) syz_open_procfs(0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x204321, 0x0) dup2(r6, r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r7, 0x0, 0x100000001) 20:14:41 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7f) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) dup(r6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5a75, &(0x7f00000001c0)={0x0, 0x524d, 0x1, 0x3, 0x33c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 20:14:41 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:41 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) 20:14:41 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 20:14:41 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02001040000000003000000000000000"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = timerfd_create(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) unshare(0x48020200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) timerfd_gettime(r3, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{r6, r7+60000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 20:14:41 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 20:14:41 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000240)={&(0x7f00000004c0)=""/134, 0x86, 0x9, 0x2}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20d315) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x188, 0x27, 0x100, 0x70bd2c, 0x25dfdbff, {0xa}, [@nested={0x173, 0x66, 0x0, 0x1, [@typed={0xcc, 0x6c, 0x0, 0x0, @binary="0b61afdb34e8961a74dd179f881bb510793c20442924114b918195e37a6254eec51ee1a4dfaea7a369de5f5e79d5f6318f0af5370ef79e892f5ab9f0e1843894690e2275e388181d94e5b8b621f5502c916d52b1b4e265c0feb220691568790e510ed684f9e7d3ad16520ce54d02afa48346802c53f103b356190a23c86baaf340bdee37063f116f2f4ca32e8ce99e4f915b5656371ff76ee16adc1ebd3d2615c24038db35f53ea4d73009ece9d4d064adf6dbcdaea2f943fbbacfa744653a6dabcce896439aeb87"}, @generic="e868b736217b279bb6809144a7c0eb65d736ee22bba69435ace05840eef3fbc997b5cd695f25f5bc1715563fe4739629f61a577f3e8850dc4f6f7600c8383d00de9af197aa93667436393ade0e2078a577d8889408ecd01769231e34d1b8f1da9904c2f71a0b81d77640d506cace42bbb86fa7a5ac8b3781ed4fd6fc0c047ba4b18edb75526c82a3ee6b4be3e5435785027cc5110a298f67798b1de61104d25e685554"]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80247ad1751a9693}, 0x800) copy_file_range(r7, 0x0, r3, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20d315) syz_mount_image$msdos(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x3ff, 0x4, &(0x7f0000000800)=[{&(0x7f0000000600)="1c9987bc949e79222fbbce41db922cc65cec69d23a49a0bdbffc45132c5afdbe45cf51086dce4a66ff637a1a1232c7777973ba88e14ad7ffad59cde92aebbad3b8672d5fe026bc70dd028bb45ad25d2a766f12c95b08eeb0352acd90edb1b63cbc61b13194f5e5526e2df53ea76e46fd976fa95a002c360f6c2d50d930a372280f371cb7deb1f2ee878ad44863556bee8db1dda610663fda563cd9a79a718c242e9c4a1ed265f5f64b3e5416f3d2db2ee9fbc3c2e200d170f384e459a2a2c9a2dc4462e076cf0b3d", 0xc8, 0x8001}, {&(0x7f0000000700)="520789962eeaf3bf5ab8c29e522c106854ef8682191ae646c991accd354fbf62642b14c915bcab34289029c492259bb52c7443f212ae5ca21e4fb3ae3d20b2d01d59597a5eb6c7dda4f538959ba1353769", 0x51, 0x6}, {&(0x7f0000000780)="5828957d7b740a5afb8705bf0a8da561d9323836c51e33b99153f97013c6bbb1b0aac5c846fd4cb332fe", 0x2a, 0xffffffffffff10ed}, {&(0x7f00000007c0)="d1ea73e0e714", 0x6, 0xfd33}], 0x200000, &(0x7f0000000880)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x382}}], [{@euid_eq}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1756.914855] FAULT_INJECTION: forcing a failure. [ 1756.914855] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.916827] CPU: 0 PID: 9947 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1756.917961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.919252] Call Trace: [ 1756.919668] dump_stack+0x107/0x167 [ 1756.920233] should_fail.cold+0x5/0xa [ 1756.920814] ? create_object.isra.0+0x3a/0xa20 [ 1756.921508] should_failslab+0x5/0x20 [ 1756.922084] kmem_cache_alloc+0x5b/0x310 [ 1756.922707] ? mark_held_locks+0x9e/0xe0 [ 1756.923341] create_object.isra.0+0x3a/0xa20 [ 1756.924015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1756.924820] kmem_cache_alloc+0x159/0x310 [ 1756.925479] xas_alloc+0x336/0x440 [ 1756.926041] xas_create+0x34a/0x10d0 [ 1756.926639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.927483] xas_store+0x8c/0x1c40 [ 1756.928056] __xa_store+0x164/0x2d0 [ 1756.928625] ? xa_delete_node+0x280/0x280 [ 1756.929279] ? trace_hardirqs_on+0x5b/0x180 [ 1756.929964] xa_store+0x31/0x50 [ 1756.930487] __io_uring_add_tctx_node+0x1cf/0x520 [ 1756.931254] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1756.932088] __do_sys_io_uring_enter+0x14de/0x1920 [ 1756.932856] ? lock_downgrade+0x6d0/0x6d0 [ 1756.933506] ? find_held_lock+0x2c/0x110 [ 1756.934151] ? io_submit_sqes+0x85c0/0x85c0 [ 1756.934845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.935606] ? wait_for_completion_io+0x270/0x270 [ 1756.936372] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.937104] ? vfs_write+0x354/0xa70 [ 1756.937691] ? fput_many+0x2f/0x1a0 [ 1756.938266] FAULT_INJECTION: forcing a failure. [ 1756.938266] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.939963] ? ksys_write+0x1a9/0x260 [ 1756.940559] ? __ia32_sys_read+0xb0/0xb0 [ 1756.941206] do_syscall_64+0x33/0x40 [ 1756.941790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.942588] RIP: 0033:0x7f818218db19 [ 1756.943179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.946045] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1756.947235] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1756.948343] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1756.949457] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.950518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.951625] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1756.952736] CPU: 1 PID: 9948 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1756.954263] FAULT_INJECTION: forcing a failure. [ 1756.954263] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.954330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.954338] Call Trace: [ 1756.954367] dump_stack+0x107/0x167 [ 1756.959296] should_fail.cold+0x5/0xa [ 1756.960154] ? xas_alloc+0x336/0x440 [ 1756.961000] should_failslab+0x5/0x20 [ 1756.961859] kmem_cache_alloc+0x5b/0x310 [ 1756.962784] xas_alloc+0x336/0x440 [ 1756.963600] xas_create+0x34a/0x10d0 [ 1756.964459] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.965646] xas_store+0x8c/0x1c40 [ 1756.966470] __xa_store+0x164/0x2d0 [ 1756.967300] ? xa_delete_node+0x280/0x280 [ 1756.968245] ? trace_hardirqs_on+0x5b/0x180 [ 1756.969220] xa_store+0x31/0x50 [ 1756.969961] __io_uring_add_tctx_node+0x1cf/0x520 [ 1756.971058] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1756.972248] __do_sys_io_uring_enter+0x14de/0x1920 [ 1756.973349] ? lock_downgrade+0x6d0/0x6d0 [ 1756.974274] ? find_held_lock+0x2c/0x110 [ 1756.975196] ? io_submit_sqes+0x85c0/0x85c0 [ 1756.976174] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.977256] ? wait_for_completion_io+0x270/0x270 [ 1756.978336] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.979390] ? vfs_write+0x354/0xa70 [ 1756.980230] ? fput_many+0x2f/0x1a0 [ 1756.981045] ? ksys_write+0x1a9/0x260 [ 1756.981897] ? __ia32_sys_read+0xb0/0xb0 [ 1756.982823] do_syscall_64+0x33/0x40 [ 1756.983658] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1756.984786] RIP: 0033:0x7f9a776e8b19 [ 1756.985610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.989651] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1756.991357] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1756.992933] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1756.994504] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.996085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.997643] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 [ 1756.999248] CPU: 0 PID: 9950 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1757.000275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1757.001506] Call Trace: [ 1757.001963] dump_stack+0x107/0x167 [ 1757.002501] should_fail.cold+0x5/0xa [ 1757.003063] ? xas_alloc+0x336/0x440 [ 1757.003609] should_failslab+0x5/0x20 [ 1757.004157] kmem_cache_alloc+0x5b/0x310 [ 1757.004764] xas_alloc+0x336/0x440 [ 1757.005285] xas_create+0x34a/0x10d0 [ 1757.005841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1757.006586] xas_store+0x8c/0x1c40 [ 1757.007125] __xa_store+0x164/0x2d0 [ 1757.007647] ? xa_delete_node+0x280/0x280 [ 1757.008268] ? trace_hardirqs_on+0x5b/0x180 [ 1757.008906] xa_store+0x31/0x50 [ 1757.009371] __io_uring_add_tctx_node+0x1cf/0x520 [ 1757.010075] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1757.010851] __do_sys_io_uring_enter+0x14de/0x1920 [ 1757.011567] ? lock_downgrade+0x6d0/0x6d0 [ 1757.012149] ? find_held_lock+0x2c/0x110 [ 1757.012735] ? io_submit_sqes+0x85c0/0x85c0 [ 1757.013352] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1757.014067] ? wait_for_completion_io+0x270/0x270 [ 1757.014753] ? rcu_read_lock_any_held+0x75/0xa0 [ 1757.015440] ? vfs_write+0x354/0xa70 [ 1757.015985] ? fput_many+0x2f/0x1a0 [ 1757.016517] ? ksys_write+0x1a9/0x260 [ 1757.017064] ? __ia32_sys_read+0xb0/0xb0 [ 1757.017662] do_syscall_64+0x33/0x40 [ 1757.018192] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1757.018951] RIP: 0033:0x7f27221a7b19 [ 1757.019511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1757.022136] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1757.023289] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1757.024352] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1757.025427] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.026481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.027602] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1757.057956] FAT-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value [ 1757.177583] FAT-fs (loop2): Unrecognized mount option "euid=00000000000000000000" or missing value 20:14:59 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 20:14:59 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) 20:14:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:14:59 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x2b4, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:14:59 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:14:59 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101000, 0x0) sendfile(r3, r4, 0x0, 0x20d315) truncate(&(0x7f0000000200)='./file1\x00', 0x3) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000000)=0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:14:59 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000003700)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)=""/45, 0x2d}], 0x1}}, {{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/130, 0x82}, {&(0x7f0000001340)=""/22, 0x16}, {&(0x7f0000001380)=""/116, 0x74}, {&(0x7f0000001400)=""/183, 0xb7}, {&(0x7f00000014c0)=""/66, 0x42}, {&(0x7f0000001540)=""/214, 0xd6}], 0x8, &(0x7f00000016c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/198, 0xc6}, {&(0x7f0000002880)=""/229, 0xe5}, {&(0x7f0000002980)=""/140, 0x8c}, {&(0x7f0000002a40)=""/220, 0xdc}], 0x5}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c40)=""/54, 0x36}, {&(0x7f0000002c80)=""/40, 0x28}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002dc0)=""/67, 0x43}], 0x1, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003000)=""/222, 0xde}, {&(0x7f0000003100)=""/52, 0x34}, {&(0x7f0000003140)=""/33, 0x21}, {&(0x7f0000003180)=""/213, 0xd5}, {&(0x7f0000003280)=""/218, 0xda}, {&(0x7f0000003380)=""/110, 0x6e}, {&(0x7f0000003400)}], 0x7, &(0x7f00000034c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003500), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003580)=""/16, 0x10}], 0x1, &(0x7f0000003600)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x142, &(0x7f00000038c0)) fcntl$lock(r0, 0x25, &(0x7f0000003900)={0x0, 0x2, 0x3, 0x5, r1}) fcntl$setlease(r0, 0x400, 0x2) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}) 20:14:59 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1774.871301] FAULT_INJECTION: forcing a failure. [ 1774.871301] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.874224] CPU: 0 PID: 9984 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1774.875962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.877901] Call Trace: [ 1774.878528] dump_stack+0x107/0x167 [ 1774.879405] should_fail.cold+0x5/0xa [ 1774.880346] ? create_object.isra.0+0x3a/0xa20 [ 1774.881415] should_failslab+0x5/0x20 [ 1774.882301] kmem_cache_alloc+0x5b/0x310 [ 1774.883269] ? mark_held_locks+0x9e/0xe0 [ 1774.884260] create_object.isra.0+0x3a/0xa20 [ 1774.885284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.886472] kmem_cache_alloc+0x159/0x310 [ 1774.887498] xas_alloc+0x336/0x440 [ 1774.888330] xas_create+0x34a/0x10d0 [ 1774.889210] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.890428] xas_store+0x8c/0x1c40 [ 1774.891325] __xa_store+0x164/0x2d0 [ 1774.892175] ? xa_delete_node+0x280/0x280 [ 1774.893186] ? trace_hardirqs_on+0x5b/0x180 [ 1774.894199] xa_store+0x31/0x50 [ 1774.894970] __io_uring_add_tctx_node+0x1cf/0x520 [ 1774.896118] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1774.897397] __do_sys_io_uring_enter+0x14de/0x1920 [ 1774.898544] ? lock_downgrade+0x6d0/0x6d0 [ 1774.899517] ? find_held_lock+0x2c/0x110 [ 1774.900486] ? io_submit_sqes+0x85c0/0x85c0 [ 1774.901535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.902654] ? wait_for_completion_io+0x270/0x270 [ 1774.903795] ? rcu_read_lock_any_held+0x75/0xa0 [ 1774.904900] ? vfs_write+0x354/0xa70 [ 1774.905767] ? fput_many+0x2f/0x1a0 [ 1774.906640] ? ksys_write+0x1a9/0x260 [ 1774.907536] ? __ia32_sys_read+0xb0/0xb0 [ 1774.908493] do_syscall_64+0x33/0x40 [ 1774.909354] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1774.910560] RIP: 0033:0x7f27221a7b19 [ 1774.911469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.915779] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1774.917543] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1774.919190] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1774.920867] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.922499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.924189] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1774.929949] FAULT_INJECTION: forcing a failure. [ 1774.929949] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.932753] CPU: 0 PID: 9990 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1774.934356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.936253] Call Trace: [ 1774.936903] dump_stack+0x107/0x167 [ 1774.937739] should_fail.cold+0x5/0xa [ 1774.938606] ? xas_alloc+0x336/0x440 [ 1774.939469] should_failslab+0x5/0x20 [ 1774.940336] kmem_cache_alloc+0x5b/0x310 [ 1774.941306] xas_alloc+0x336/0x440 [ 1774.942120] xas_create+0x34a/0x10d0 [ 1774.943018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.944227] xas_store+0x8c/0x1c40 [ 1774.945052] __xa_store+0x164/0x2d0 [ 1774.945877] ? xa_delete_node+0x280/0x280 [ 1774.946864] ? trace_hardirqs_on+0x5b/0x180 [ 1774.947862] xa_store+0x31/0x50 [ 1774.948645] __io_uring_add_tctx_node+0x1cf/0x520 [ 1774.949739] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1774.950941] __do_sys_io_uring_enter+0x14de/0x1920 [ 1774.952085] ? lock_downgrade+0x6d0/0x6d0 [ 1774.953062] ? find_held_lock+0x2c/0x110 [ 1774.953992] ? io_submit_sqes+0x85c0/0x85c0 [ 1774.954979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1774.956182] ? wait_for_completion_io+0x270/0x270 [ 1774.957340] ? rcu_read_lock_any_held+0x75/0xa0 [ 1774.958417] ? vfs_write+0x354/0xa70 [ 1774.959308] ? fput_many+0x2f/0x1a0 [ 1774.960132] ? ksys_write+0x1a9/0x260 [ 1774.961048] ? __ia32_sys_read+0xb0/0xb0 [ 1774.962024] do_syscall_64+0x33/0x40 [ 1774.962880] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1774.964042] RIP: 0033:0x7f818218db19 [ 1774.964894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.969120] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 20:14:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000400)={0x0, 0xfb, 0x2a, 0x3, 0x5, "e90a778c76633ed225f974ca0100fbf1", "9f0d9ee601aec55cff9112ef2d82c109005c738a2a"}, 0x2a, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400"/11], 0x14}}, 0x0) close_range(0xffffffffffffffff, r3, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x26) timerfd_create(0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x40, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x6a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x20048015) open_tree(r1, &(0x7f0000000100)='./file1\x00', 0x100) fallocate(0xffffffffffffffff, 0x71, 0x5, 0x8000) timerfd_create(0x0, 0x0) unshare(0x48020200) [ 1774.970887] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1774.972683] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1774.974293] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.975953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.977556] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1774.978340] FAULT_INJECTION: forcing a failure. [ 1774.978340] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.981027] CPU: 1 PID: 9992 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1774.982586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.984799] Call Trace: [ 1774.985491] dump_stack+0x107/0x167 [ 1774.986443] should_fail.cold+0x5/0xa [ 1774.987494] ? create_object.isra.0+0x3a/0xa20 [ 1774.988697] should_failslab+0x5/0x20 [ 1774.989692] kmem_cache_alloc+0x5b/0x310 [ 1774.990826] ? mark_held_locks+0x9e/0xe0 [ 1774.992039] create_object.isra.0+0x3a/0xa20 [ 1774.993328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.994802] kmem_cache_alloc+0x159/0x310 [ 1774.996068] xas_alloc+0x336/0x440 [ 1774.996976] xas_create+0x34a/0x10d0 [ 1774.997927] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.999287] xas_store+0x8c/0x1c40 [ 1775.000209] __xa_store+0x164/0x2d0 [ 1775.001130] ? xa_delete_node+0x280/0x280 [ 1775.002179] ? trace_hardirqs_on+0x5b/0x180 [ 1775.003332] xa_store+0x31/0x50 [ 1775.004169] __io_uring_add_tctx_node+0x1cf/0x520 [ 1775.005408] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1775.006752] __do_sys_io_uring_enter+0x14de/0x1920 [ 1775.008059] ? lock_downgrade+0x6d0/0x6d0 [ 1775.009136] ? find_held_lock+0x2c/0x110 [ 1775.010182] ? io_submit_sqes+0x85c0/0x85c0 [ 1775.011330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1775.012569] ? wait_for_completion_io+0x270/0x270 [ 1775.013783] ? rcu_read_lock_any_held+0x75/0xa0 [ 1775.015000] ? vfs_write+0x354/0xa70 [ 1775.016002] ? fput_many+0x2f/0x1a0 [ 1775.016956] ? ksys_write+0x1a9/0x260 [ 1775.017948] ? __ia32_sys_read+0xb0/0xb0 [ 1775.019059] do_syscall_64+0x33/0x40 [ 1775.020031] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1775.021502] RIP: 0033:0x7f9a776e8b19 [ 1775.022496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1775.027341] RSP: 002b:00007f9a74c1c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1775.029271] RAX: ffffffffffffffda RBX: 00007f9a777fc0e0 RCX: 00007f9a776e8b19 [ 1775.031140] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1775.032796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9994 comm=syz-executor.1 [ 1775.032969] RBP: 00007f9a74c1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1775.032988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.039421] R13: 00007fff86d8f12f R14: 00007f9a74c1c300 R15: 0000000000022000 [ 1775.269031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9994 comm=syz-executor.1 20:15:14 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) 20:15:14 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 20:15:14 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) mkdirat(r4, &(0x7f0000000040)='./file1\x00', 0x1a5) execveat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000200)='&+\x00', &(0x7f0000000240)='+\x00'], &(0x7f00000003c0)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00'], 0x1400) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x2010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000280)={0x77359400}}, 0x8d79) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) lchown(&(0x7f0000000400)='./file0\x00', r8, 0xee01) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:15:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:15:14 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd=r0, 0x4, 0x3, 0x6, 0x0, 0x1, {0x0, r3}}, 0x200003) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = signalfd(r0, &(0x7f0000000000)={[0xc0c]}, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r5, &(0x7f0000000200)={0x40002002}, r4, 0x3, 0x0, 0x0, {0x0, r6}}, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000400)=""/173) io_uring_enter(r0, 0x4494, 0x40000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x20, 0x1e, 0xe5, 0x0, 0x60000, 0x280, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0xeae310ca1e8a994a, @perf_config_ext={0x4, 0x20}, 0x2, 0x101, 0x3ff, 0x5, 0x3, 0x7ff, 0x20, 0x0, 0x4, 0x0, 0x41}, 0x0, 0x0, r5, 0x0) 20:15:14 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x57d, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31393837353733353000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f6cc41a12f9c46cca550405a7e081d32010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000d817509bd817509b00000000d9f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000d9f4655fd9f4655fd9f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000045361a1200000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000000140)="ed8100001a040000d9f4655fd9f4655fd9f4655f0000000000000100040000000000000001000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e256bd9800000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000d9f4655fd9f4655fd9f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3139383735373335302f66696c65302f66696c653000000000000000000000000000000000000000000000bed590d700000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="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", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) 20:15:14 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1790.553481] FAULT_INJECTION: forcing a failure. [ 1790.553481] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.554645] CPU: 0 PID: 10022 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1790.555337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.556149] Call Trace: [ 1790.556427] dump_stack+0x107/0x167 [ 1790.556794] should_fail.cold+0x5/0xa [ 1790.557178] ? create_object.isra.0+0x3a/0xa20 [ 1790.557631] should_failslab+0x5/0x20 [ 1790.558010] kmem_cache_alloc+0x5b/0x310 [ 1790.558415] ? mark_held_locks+0x9e/0xe0 [ 1790.558818] create_object.isra.0+0x3a/0xa20 [ 1790.559258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1790.559767] kmem_cache_alloc+0x159/0x310 [ 1790.560230] xas_alloc+0x336/0x440 [ 1790.560590] xas_create+0x34a/0x10d0 [ 1790.560967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1790.561484] xas_store+0x8c/0x1c40 [ 1790.561846] __xa_store+0x164/0x2d0 [ 1790.562209] ? xa_delete_node+0x280/0x280 [ 1790.562684] ? trace_hardirqs_on+0x5b/0x180 [ 1790.563126] xa_store+0x31/0x50 [ 1790.563496] __io_uring_add_tctx_node+0x1cf/0x520 [ 1790.563988] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1790.564529] __do_sys_io_uring_enter+0x14de/0x1920 [ 1790.565039] ? lock_downgrade+0x6d0/0x6d0 [ 1790.565459] ? find_held_lock+0x2c/0x110 [ 1790.565909] ? io_submit_sqes+0x85c0/0x85c0 [ 1790.566365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1790.566861] ? wait_for_completion_io+0x270/0x270 [ 1790.567376] ? rcu_read_lock_any_held+0x75/0xa0 [ 1790.567846] ? vfs_write+0x354/0xa70 [ 1790.568236] ? fput_many+0x2f/0x1a0 [ 1790.568611] ? ksys_write+0x1a9/0x260 [ 1790.569004] ? __ia32_sys_read+0xb0/0xb0 [ 1790.569433] do_syscall_64+0x33/0x40 [ 1790.569811] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1790.570329] RIP: 0033:0x7f818218db19 [ 1790.570735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.572610] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1790.573441] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1790.574172] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1790.574893] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.575669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.576400] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1790.590022] FAULT_INJECTION: forcing a failure. [ 1790.590022] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.591411] CPU: 0 PID: 10024 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1790.592093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.593009] Call Trace: [ 1790.593280] dump_stack+0x107/0x167 [ 1790.593645] should_fail.cold+0x5/0xa [ 1790.594023] ? xas_alloc+0x336/0x440 [ 1790.594394] should_failslab+0x5/0x20 [ 1790.594777] kmem_cache_alloc+0x5b/0x310 [ 1790.595206] xas_alloc+0x336/0x440 [ 1790.595637] xas_create+0x34a/0x10d0 [ 1790.596023] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1790.596585] xas_store+0x8c/0x1c40 [ 1790.596952] __xa_store+0x164/0x2d0 [ 1790.597315] ? xa_delete_node+0x280/0x280 [ 1790.597731] ? trace_hardirqs_on+0x5b/0x180 [ 1790.598163] xa_store+0x31/0x50 [ 1790.598493] __io_uring_add_tctx_node+0x1cf/0x520 [ 1790.598971] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1790.599515] __do_sys_io_uring_enter+0x14de/0x1920 [ 1790.600025] ? lock_downgrade+0x6d0/0x6d0 [ 1790.600440] ? find_held_lock+0x2c/0x110 [ 1790.600862] ? io_submit_sqes+0x85c0/0x85c0 [ 1790.601306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1790.601808] ? wait_for_completion_io+0x270/0x270 [ 1790.602307] ? rcu_read_lock_any_held+0x75/0xa0 [ 1790.602783] ? vfs_write+0x354/0xa70 [ 1790.603168] ? fput_many+0x2f/0x1a0 [ 1790.603551] ? ksys_write+0x1a9/0x260 [ 1790.603961] ? __ia32_sys_read+0xb0/0xb0 [ 1790.604394] do_syscall_64+0x33/0x40 [ 1790.604780] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1790.605311] RIP: 0033:0x7f27221a7b19 [ 1790.605723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.607611] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1790.608389] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1790.609168] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1790.609909] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.610675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.611406] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:15:15 executing program 1: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\t'], 0x31b) close(r0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/202, 0xca}, {&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000300)=""/196, 0xc4}], 0x4, 0x340e800, 0x2) [ 1790.631753] FAULT_INJECTION: forcing a failure. [ 1790.631753] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.633143] CPU: 0 PID: 10027 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1790.633891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.634793] Call Trace: [ 1790.635093] dump_stack+0x107/0x167 [ 1790.635513] should_fail.cold+0x5/0xa [ 1790.635931] ? xas_alloc+0x336/0x440 [ 1790.636350] should_failslab+0x5/0x20 [ 1790.636769] kmem_cache_alloc+0x5b/0x310 [ 1790.637236] xas_alloc+0x336/0x440 [ 1790.637646] xas_create+0x34a/0x10d0 [ 1790.638083] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1790.638754] xas_store+0x8c/0x1c40 [ 1790.639158] __xa_store+0x164/0x2d0 [ 1790.639566] ? xa_delete_node+0x280/0x280 [ 1790.640042] ? trace_hardirqs_on+0x5b/0x180 [ 1790.640530] xa_store+0x31/0x50 [ 1790.640893] __io_uring_add_tctx_node+0x1cf/0x520 [ 1790.641430] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1790.642029] __do_sys_io_uring_enter+0x14de/0x1920 [ 1790.642584] ? lock_downgrade+0x6d0/0x6d0 [ 1790.643044] ? find_held_lock+0x2c/0x110 [ 1790.643509] ? io_submit_sqes+0x85c0/0x85c0 [ 1790.643993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1790.644531] ? wait_for_completion_io+0x270/0x270 [ 1790.645051] ? rcu_read_lock_any_held+0x75/0xa0 [ 1790.645550] ? vfs_write+0x354/0xa70 [ 1790.645954] ? fput_many+0x2f/0x1a0 [ 1790.646348] ? ksys_write+0x1a9/0x260 [ 1790.646764] ? __ia32_sys_read+0xb0/0xb0 [ 1790.647217] do_syscall_64+0x33/0x40 [ 1790.647638] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1790.648184] RIP: 0033:0x7f9a776e8b19 [ 1790.648590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.650547] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1790.651379] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1790.652141] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1790.652903] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.653653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1790.654411] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:15:15 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) r6 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file1\x00', 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:15:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e0d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) fcntl$dupfd(r1, 0x0, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r1, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000040)={0x80000}) 20:15:15 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./file1\x00', 0x0, 0x3a0) sendfile(r3, r4, 0x0, 0x20d315) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000001740), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1438, 0x23, 0x10, 0x70bd29, 0x25dfdbff, {0x1e}, [@nested={0x11a9, 0x20, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @u32=0x40}, @generic="770ec306770cb8dddfdb34fea010039860ddb4a4e99883c49188efd1f65abbb1e102139907d987e1c62dc412f233122768ec", @generic="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", @generic="17c0552c92d2b07af62f6b6db98f5e3674e902c42ddd0749ec32109c655da6d64da85c4f63a962ae6fa560b4efe52b42cc883cd100ec7c5f30999eb381780e2e4d2647d3b4e6e528f8a06d5883d8b431c08dc123c1eabf59f3000304c7cf06b9e1680be11d3a239a84affaa152c13bc7f9fbcc991a024c1bfd65a3f6cf061323", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="e618cf7b77d7c0d20efd1cd50ca1c2816002dc473f7ea1462f38791bb62545d4f6fcf31259eb14f69b73fb1e7144d80333906dca009c8cc532483dc77bbc80df77678f8b00ea7a4f7db957d059ebb1a86d66236d5f4f744fcc170255d79b2d2f67e0205925e7fa6f8776f600beffa112342aef928dd228026cc3d3eab24ff24f3e4d76ab3861cfcbe81aacfde5e09b96489ca9b060658314d7126b0d061f96d6ca46915b6f2412265626c9914599", @generic="ea9a30bd0b53df40047f8f185cdfb677748209edc25cffcf8d9aba8dda2444876adfbe530402a6961d"]}, @generic="76ec1a4d2890610449e7a040c2", @nested={0x1a3, 0x46, 0x0, 0x1, [@generic="c6b5088af06fcd6987626054fcee219d598bc345468139b3cc2beddb8f3474149e2a0ec06e34d1a10ae4fa4a2aee824deb73b04fc54f03042a390765db90d7c5bdd4ffd9e939b5b06a52b4d40da3720d07b227d5ae25fb91bf744da9dd714f6da8092bbb030e12ade42c4d9bcb318b936bdb3c509f763e338a4343e5957a7573c887e0cd896eb8abe690be5a60441bd6588d82968235d182f4c46a3ebfa3bd7fabd0c6f691af6300810378e540b5145fe1c738a0c6128d3cd36c308a173145a0ddcb88684db5688836566dfd153ba3256008a039", @generic="81859a5b9715df07614a5434c5bbb2eab636ff354f69901184dd9272466e18977435e6a17728043d1f7ca920feb52cc27e4875dc78c492587a4179ee7913840801276776e0c4a5a4f7f2d3a64930a4b10cd7dcf77da5fee90a9033d07ef99e38745a455e2c574bd37f0c35418271bfe5b37b7b5e91470a06639251c4cccd0c62b31079b1d360ba66a8658af8d70c13289ffe83a292a9174b30853f3c9bd23210d615ff1e5e2efc05e36a52d920f88852b153d3be81e6ba0fefdf4686d32a6e33e6c1e1f3d6b598be22af92"]}, @nested={0xc1, 0x7d, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x76, 0x0, 0x0, @pid=r8}, @generic="4ef26ce8259cf0bbb2d7a10a3353d22e8d85b9a02d3f9192235935e8e7e2cd46e7063f2be73ce75c7003a06ddc4360124dfe303fdd681be34f1bb335452ec57068d40444de386f2d095465488044c47c", @generic="6a6585475f00e6c7703d0e86c6c48e0ccda4142626acdb4e91cf3f4f7163e9116f2cfd30aac2de4bc2fe08fed348ffb5bd9fb29567841f3e4392bb8feea54551ed150119505012661b917cd398aba01861", @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x1f}]}]}, 0x1438}, 0x1, 0x0, 0x0, 0x1}, 0x2400c012) 20:15:15 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:15 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x639a, 0x3296, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="011c0800010d002018000000", @ANYRES32=r3, @ANYBLOB="0000000000006d0605a8ee15a8d2ca51607903000002000002000000000000"]) close_range(r6, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) sendfile(r7, r0, &(0x7f0000000200)=0x7fff, 0x20) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2c0200, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) 20:15:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:15:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_eee={0x44, 0x8, 0x400, 0x4, 0x0, 0x401, 0x7fffffff, 0x0, [0x4]}}) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x185a43, 0x2f6a55a72c0b0554) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x40, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xe, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) [ 1790.977184] FAULT_INJECTION: forcing a failure. [ 1790.977184] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.978463] CPU: 0 PID: 10053 Comm: syz-executor.3 Not tainted 5.10.197 #1 [ 1790.979232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1790.980158] Call Trace: [ 1790.980466] dump_stack+0x107/0x167 [ 1790.980866] should_fail.cold+0x5/0xa [ 1790.981294] ? create_object.isra.0+0x3a/0xa20 [ 1790.981786] should_failslab+0x5/0x20 [ 1790.982205] kmem_cache_alloc+0x5b/0x310 [ 1790.982636] ? mark_held_locks+0x9e/0xe0 [ 1790.983091] create_object.isra.0+0x3a/0xa20 [ 1790.983562] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1790.984097] kmem_cache_alloc+0x159/0x310 [ 1790.984537] xas_alloc+0x336/0x440 [ 1790.984914] xas_create+0x34a/0x10d0 [ 1790.985317] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1790.985864] xas_store+0x8c/0x1c40 [ 1790.986290] __xa_store+0x164/0x2d0 [ 1790.986683] ? xa_delete_node+0x280/0x280 [ 1790.987131] ? trace_hardirqs_on+0x5b/0x180 [ 1790.987619] xa_store+0x31/0x50 [ 1790.987971] __io_uring_add_tctx_node+0x1cf/0x520 [ 1790.988476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1790.989028] __do_sys_io_uring_enter+0x14de/0x1920 [ 1790.989538] ? lock_downgrade+0x6d0/0x6d0 [ 1790.989963] ? find_held_lock+0x2c/0x110 [ 1790.990403] ? io_submit_sqes+0x85c0/0x85c0 [ 1790.990892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1790.991438] ? wait_for_completion_io+0x270/0x270 [ 1790.991969] ? rcu_read_lock_any_held+0x75/0xa0 [ 1790.992457] ? vfs_write+0x354/0xa70 [ 1790.992868] ? fput_many+0x2f/0x1a0 [ 1790.993255] ? ksys_write+0x1a9/0x260 [ 1790.993670] ? __ia32_sys_read+0xb0/0xb0 [ 1790.994110] do_syscall_64+0x33/0x40 [ 1790.994497] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1790.995048] RIP: 0033:0x7f9a776e8b19 [ 1790.995458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1790.997333] RSP: 002b:00007f9a74c3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1790.998111] RAX: ffffffffffffffda RBX: 00007f9a777fc020 RCX: 00007f9a776e8b19 [ 1790.998838] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1790.999572] RBP: 00007f9a74c3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1791.000313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1791.001052] R13: 00007fff86d8f12f R14: 00007f9a74c3d300 R15: 0000000000022000 20:15:29 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:29 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 20:15:29 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) 20:15:29 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0), 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0xa, 0x9, 0x0, 0x1, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:15:29 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x202400, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x240000, 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0) getsockopt(0xffffffffffffffff, 0x4, 0x7, &(0x7f0000000240)=""/62, 0xffffffffffffffff) 20:15:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:15:29 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:15:29 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1805.302134] FAULT_INJECTION: forcing a failure. [ 1805.302134] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.304615] CPU: 0 PID: 10079 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1805.305987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1805.307640] Call Trace: [ 1805.308175] dump_stack+0x107/0x167 [ 1805.308904] should_fail.cold+0x5/0xa [ 1805.309669] ? create_object.isra.0+0x3a/0xa20 [ 1805.310581] should_failslab+0x5/0x20 [ 1805.311339] kmem_cache_alloc+0x5b/0x310 [ 1805.312175] ? mark_held_locks+0x9e/0xe0 [ 1805.312991] create_object.isra.0+0x3a/0xa20 [ 1805.313864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1805.314876] kmem_cache_alloc+0x159/0x310 [ 1805.315598] FAULT_INJECTION: forcing a failure. [ 1805.315598] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.315716] xas_alloc+0x336/0x440 [ 1805.318578] xas_create+0x34a/0x10d0 [ 1805.319336] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1805.320381] xas_store+0x8c/0x1c40 [ 1805.321105] __xa_store+0x164/0x2d0 [ 1805.321834] ? xa_delete_node+0x280/0x280 [ 1805.322667] ? trace_hardirqs_on+0x5b/0x180 [ 1805.323546] xa_store+0x31/0x50 [ 1805.324217] __io_uring_add_tctx_node+0x1cf/0x520 [ 1805.325183] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1805.326237] __do_sys_io_uring_enter+0x14de/0x1920 [ 1805.327212] ? lock_downgrade+0x6d0/0x6d0 [ 1805.328038] ? find_held_lock+0x2c/0x110 [ 1805.328853] ? io_submit_sqes+0x85c0/0x85c0 [ 1805.329719] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1805.330678] ? wait_for_completion_io+0x270/0x270 [ 1805.331651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1805.332570] ? vfs_write+0x354/0xa70 [ 1805.333313] ? fput_many+0x2f/0x1a0 [ 1805.334055] ? ksys_write+0x1a9/0x260 [ 1805.334818] ? __ia32_sys_read+0xb0/0xb0 [ 1805.335650] do_syscall_64+0x33/0x40 [ 1805.336391] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1805.337408] RIP: 0033:0x7f27221a7b19 [ 1805.338147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.341775] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1805.343280] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1805.344703] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1805.346109] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.347523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1805.348933] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1805.350380] CPU: 1 PID: 10080 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1805.351955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1805.353885] Call Trace: [ 1805.354554] dump_stack+0x107/0x167 [ 1805.355328] should_fail.cold+0x5/0xa [ 1805.356102] ? xas_alloc+0x336/0x440 [ 1805.356842] should_failslab+0x5/0x20 [ 1805.357593] kmem_cache_alloc+0x5b/0x310 [ 1805.358402] xas_alloc+0x336/0x440 [ 1805.359108] xas_create+0x34a/0x10d0 [ 1805.359907] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1805.360946] xas_store+0x8c/0x1c40 [ 1805.361671] __xa_store+0x164/0x2d0 [ 1805.362397] ? xa_delete_node+0x280/0x280 [ 1805.363226] ? trace_hardirqs_on+0x5b/0x180 [ 1805.364107] xa_store+0x31/0x50 [ 1805.364775] __io_uring_add_tctx_node+0x1cf/0x520 [ 1805.365730] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1805.366785] __do_sys_io_uring_enter+0x14de/0x1920 [ 1805.367769] ? lock_downgrade+0x6d0/0x6d0 [ 1805.368587] ? find_held_lock+0x2c/0x110 [ 1805.369398] ? io_submit_sqes+0x85c0/0x85c0 [ 1805.370262] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1805.371221] ? wait_for_completion_io+0x270/0x270 [ 1805.372223] ? rcu_read_lock_any_held+0x75/0xa0 [ 1805.373148] ? vfs_write+0x354/0xa70 [ 1805.373893] ? fput_many+0x2f/0x1a0 [ 1805.374616] ? ksys_write+0x1a9/0x260 [ 1805.375377] ? __ia32_sys_read+0xb0/0xb0 [ 1805.376234] do_syscall_64+0x33/0x40 [ 1805.376980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1805.378002] RIP: 0033:0x7f818218db19 [ 1805.378749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.382418] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1805.383957] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1805.385404] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1805.386847] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.388296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1805.389727] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:15:29 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:29 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000000300)="75347a923138cb24a82667388db93464b4abbc4d760e1a1be4f2bb9ab19258e462a2676c6a1d1998506ab64606b2dcd87565543d0ef9ce346e7541f659d883a57867f1111978fca0e7eb9d5230678e1f6bc0899ae26fddf434199547f2cc7b6040f67d90f824dfafb6ffca4546c2ff6b94bba7cbb90b9739fc241e2e0fdfcc199adbb43c9a76ea1570ceaec18157", 0x8e, 0x20008001, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:15:30 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x120bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:15:30 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:30 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x802, 0x16) getdents64(r4, &(0x7f0000000200)=""/27, 0x1b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r4, &(0x7f0000000240)='./file1\x00', 0x40680, 0x70) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000340)) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000300)={0x6}) 20:15:30 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 20:15:30 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 20:15:30 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) 20:15:30 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:15:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r6, 0xd8499488957a772f}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x88, r2, 0x2, 0x70bd29, 0x4, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x2, 0x20, 0x1}]}, 0x88}}, 0x0) [ 1806.291549] FAULT_INJECTION: forcing a failure. [ 1806.291549] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.293598] CPU: 0 PID: 10121 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1806.294848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.296354] Call Trace: [ 1806.296835] dump_stack+0x107/0x167 [ 1806.297498] should_fail.cold+0x5/0xa [ 1806.298187] ? xas_alloc+0x336/0x440 [ 1806.298897] should_failslab+0x5/0x20 [ 1806.299611] kmem_cache_alloc+0x5b/0x310 [ 1806.300365] xas_alloc+0x336/0x440 [ 1806.301025] xas_create+0x34a/0x10d0 [ 1806.301709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1806.302692] xas_store+0x8c/0x1c40 [ 1806.303357] __xa_store+0x164/0x2d0 [ 1806.304029] ? xa_delete_node+0x280/0x280 [ 1806.304783] ? trace_hardirqs_on+0x5b/0x180 [ 1806.305563] xa_store+0x31/0x50 [ 1806.306154] __io_uring_add_tctx_node+0x1cf/0x520 [ 1806.307019] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1806.307976] __do_sys_io_uring_enter+0x14de/0x1920 [ 1806.308861] ? lock_downgrade+0x6d0/0x6d0 [ 1806.309611] ? find_held_lock+0x2c/0x110 [ 1806.310340] ? io_submit_sqes+0x85c0/0x85c0 [ 1806.311123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1806.311991] ? wait_for_completion_io+0x270/0x270 [ 1806.312855] ? rcu_read_lock_any_held+0x75/0xa0 [ 1806.313694] ? vfs_write+0x354/0xa70 [ 1806.314360] ? fput_many+0x2f/0x1a0 [ 1806.315016] ? ksys_write+0x1a9/0x260 [ 1806.315726] ? __ia32_sys_read+0xb0/0xb0 [ 1806.316466] do_syscall_64+0x33/0x40 [ 1806.317130] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1806.318059] RIP: 0033:0x7f27221a7b19 [ 1806.318713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.322109] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1806.323482] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1806.324803] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1806.326070] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.327335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.328609] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1806.334133] FAULT_INJECTION: forcing a failure. [ 1806.334133] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.336943] CPU: 1 PID: 10123 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1806.338516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.340403] Call Trace: [ 1806.341020] dump_stack+0x107/0x167 [ 1806.341874] should_fail.cold+0x5/0xa [ 1806.342755] ? create_object.isra.0+0x3a/0xa20 [ 1806.343824] should_failslab+0x5/0x20 [ 1806.344706] kmem_cache_alloc+0x5b/0x310 [ 1806.345633] ? mark_held_locks+0x9e/0xe0 [ 1806.346580] create_object.isra.0+0x3a/0xa20 [ 1806.347615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1806.348791] kmem_cache_alloc+0x159/0x310 [ 1806.349744] xas_alloc+0x336/0x440 [ 1806.350573] xas_create+0x34a/0x10d0 [ 1806.351456] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1806.352649] xas_store+0x8c/0x1c40 [ 1806.353501] __xa_store+0x164/0x2d0 [ 1806.354343] ? xa_delete_node+0x280/0x280 [ 1806.355304] ? trace_hardirqs_on+0x5b/0x180 [ 1806.356326] xa_store+0x31/0x50 [ 1806.357087] __io_uring_add_tctx_node+0x1cf/0x520 [ 1806.358187] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1806.359404] __do_sys_io_uring_enter+0x14de/0x1920 [ 1806.360550] ? lock_downgrade+0x6d0/0x6d0 [ 1806.361495] ? find_held_lock+0x2c/0x110 [ 1806.362436] ? io_submit_sqes+0x85c0/0x85c0 [ 1806.363439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1806.364579] ? wait_for_completion_io+0x270/0x270 [ 1806.365679] ? rcu_read_lock_any_held+0x75/0xa0 [ 1806.366743] ? vfs_write+0x354/0xa70 [ 1806.367596] ? fput_many+0x2f/0x1a0 [ 1806.368443] ? ksys_write+0x1a9/0x260 [ 1806.369298] ? __ia32_sys_read+0xb0/0xb0 [ 1806.370251] do_syscall_64+0x33/0x40 [ 1806.371094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1806.372249] RIP: 0033:0x7f818218db19 [ 1806.373086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.377280] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1806.379012] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1806.380636] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1806.382270] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.383896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.385537] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:15:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:47 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x42, 0x0, 0x0, 0x0) 20:15:47 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 20:15:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x400000, 0x0) ftruncate(r0, 0x1000003) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/file']) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200), 0xf6ae) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r4, &(0x7f0000000240)=@ieee802154, &(0x7f00000002c0)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) lseek(r2, 0x100000000000000, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) fcntl$setstatus(r6, 0x4, 0xc00) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) 20:15:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:15:47 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 20:15:47 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3, 0x3e, 0xdf76, 0x374, 0x40, 0x92, 0x4, 0x6, 0x38, 0x2, 0x80, 0x8, 0xfff7}, [{0x4, 0x7fffffff, 0x7f, 0x2, 0x1, 0x100000000, 0x2, 0x1}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x1478) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:15:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = pidfd_getfd(r3, r0, 0x0) sendmsg(r4, &(0x7f0000000700)={&(0x7f0000000200)=@ax25={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="3664fc17792a452bb230311c532db0e2bcb50c37ca425f5a794abeda4ea5ec671cbda43ba7ded9312e74e650a17a0dc8934a184276fc87362b8612397a0a10ad8056ecb05e276820bab03ba79b8383fc4d53146021a00af33c95356ecfa5b43deb798777b3708725d6a12a3e740a68ece0f2338b98211a91fd7b8272b8810635b82fa220b7d2a5b35f8f7f4b5bfd1ed90edb24afce6b5e0a0a9c6d23f5b3b2bc06eb825041547520717b968730", 0xad}, {&(0x7f00000003c0)="862cf76f1fd132b03d58713dc7808dd77ed3a1babcb05f9baca0c8be62af1cf438697a7162d3cf73e33848a38a93352b6ae5957f554c971c21889a5dc98cf1431bb57e9837fb388321a0677c81480e6948c4583deb97dd1ca4d8f0e56279d161feb769e01ef724c768b948cebc84aff1864492893f3cafff7bdfd6117f7d9a0fc99c389706fbca2693291d069f0e290edee4c85ee1179fb369ec63dc090e4e71e87e4c6ac2b561fbfc7eeae5f50f0926df845421fc59cc8b78230e531380df0d90a623b7c90b514bd43bce4bb1", 0xcd}], 0x2, &(0x7f0000000500)=[{0x100, 0x29, 0x8000, "d720cb4af03f4da935c225b8a5650cbf755ee474833d892c2627828437ad1066c5de5e14618dbcc4bbee6bb5a872541eb53d63b8cee70f89c6ac6e0a920d69c25a5e10da81780ea84a7964580ae5ac2cd7b3e5e117409cf4b8a4ccdfb02b624ad2b5cee4281e5ce92fe9175fcc7cc0efc9a36e3a6edf61efb8dcfca18a0e50c249c75a568f07b61ec31161c0081c714623d3f59c8cdb6e941d2e7f27adf64bff474704d8d99d8697c0275c5198c3992bdb178a116edb1cdbb387e4e40bc77303481e45b12e5f4bf6de44ab101d19ae4fae2fbc85d5e596c69508e1142c2d9b3d12a5f2c6dbebbc1f635cb345"}, {0xd0, 0x10d, 0x4dba26f7, "ba8b6fc6be0fac4ce074404dcd0485fa25fa92f6e7ce4ba1dcefabd19de3df68e10da842f85a31c8989eabcc301abf1a6d1be00c791b498ee9056f3543134257d3b0c9281d2a44ab0273a7aae03e6b85158022446193c80a2399c67aef2cc3e78a310829f58cf4bc3bef6a6017afd67c1e4f57fe8571d4d0aa6f9e3da40989db6204f13c3c70f567654f80c0eb8c3afafc4c1742d69fd92930c273cf22ad0d60d1dad4f640c72e05064cd167eda2635ff599d5927c726ebe6f1ddce458437ed9"}], 0x1d0}, 0x4001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) openat(r7, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x200040) [ 1823.202685] FAULT_INJECTION: forcing a failure. [ 1823.202685] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.205295] CPU: 0 PID: 10151 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1823.206830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.208678] Call Trace: [ 1823.209277] dump_stack+0x107/0x167 [ 1823.210094] should_fail.cold+0x5/0xa [ 1823.210944] ? xas_alloc+0x336/0x440 [ 1823.211791] should_failslab+0x5/0x20 [ 1823.212636] kmem_cache_alloc+0x5b/0x310 [ 1823.213545] xas_alloc+0x336/0x440 [ 1823.214344] xas_create+0x34a/0x10d0 [ 1823.215188] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1823.216372] xas_store+0x8c/0x1c40 [ 1823.217184] __xa_store+0x164/0x2d0 [ 1823.217994] ? xa_delete_node+0x280/0x280 [ 1823.218920] ? trace_hardirqs_on+0x5b/0x180 [ 1823.219896] xa_store+0x31/0x50 [ 1823.220637] __io_uring_add_tctx_node+0x1cf/0x520 [ 1823.221706] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.222878] __do_sys_io_uring_enter+0x14de/0x1920 [ 1823.223970] ? lock_downgrade+0x6d0/0x6d0 [ 1823.224883] ? find_held_lock+0x2c/0x110 [ 1823.225785] ? io_submit_sqes+0x85c0/0x85c0 [ 1823.226752] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.227841] ? wait_for_completion_io+0x270/0x270 [ 1823.228908] ? rcu_read_lock_any_held+0x75/0xa0 [ 1823.229933] ? vfs_write+0x354/0xa70 [ 1823.230757] ? fput_many+0x2f/0x1a0 [ 1823.231564] ? ksys_write+0x1a9/0x260 [ 1823.232418] ? __ia32_sys_read+0xb0/0xb0 [ 1823.233333] do_syscall_64+0x33/0x40 [ 1823.234160] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1823.235287] RIP: 0033:0x7f818218db19 [ 1823.236140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.240450] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1823.242335] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1823.244015] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1823.245519] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.247022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.248542] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1823.292108] FAULT_INJECTION: forcing a failure. [ 1823.292108] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.293572] CPU: 1 PID: 10162 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1823.294432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.295487] Call Trace: [ 1823.295843] dump_stack+0x107/0x167 [ 1823.296358] should_fail.cold+0x5/0xa [ 1823.296940] ? ___slab_alloc+0x360/0x700 [ 1823.297561] ? create_object.isra.0+0x3a/0xa20 [ 1823.298256] should_failslab+0x5/0x20 [ 1823.298833] kmem_cache_alloc+0x5b/0x310 [ 1823.299459] create_object.isra.0+0x3a/0xa20 [ 1823.300143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.300914] kmem_cache_alloc+0x159/0x310 [ 1823.301548] xas_alloc+0x336/0x440 [ 1823.302090] xas_create+0x34a/0x10d0 [ 1823.302669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1823.303474] xas_store+0x8c/0x1c40 [ 1823.304040] __xa_store+0x164/0x2d0 [ 1823.304592] ? xa_delete_node+0x280/0x280 [ 1823.305227] ? trace_hardirqs_on+0x5b/0x180 [ 1823.305889] xa_store+0x31/0x50 [ 1823.306391] __io_uring_add_tctx_node+0x1cf/0x520 [ 1823.307125] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1823.307945] __do_sys_io_uring_enter+0x14de/0x1920 [ 1823.308585] ? lock_downgrade+0x6d0/0x6d0 [ 1823.309105] ? find_held_lock+0x2c/0x110 [ 1823.309619] ? io_submit_sqes+0x85c0/0x85c0 [ 1823.310177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1823.310772] ? wait_for_completion_io+0x270/0x270 [ 1823.311370] ? rcu_read_lock_any_held+0x75/0xa0 [ 1823.311949] ? vfs_write+0x354/0xa70 [ 1823.312404] ? fput_many+0x2f/0x1a0 [ 1823.312848] ? ksys_write+0x1a9/0x260 [ 1823.313320] ? __ia32_sys_read+0xb0/0xb0 [ 1823.313832] do_syscall_64+0x33/0x40 [ 1823.314283] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1823.314909] RIP: 0033:0x7f27221a7b19 [ 1823.315361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.317585] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1823.318509] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1823.319382] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1823.320162] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.321028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.321900] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:15:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000002c0)=""/209) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x15, 0x84418633dd91b2af, 0x70bd2d, 0x25dfdbfd, {0x17}, [@typed={0x25, 0x96, 0x0, 0x0, @binary="c651c9d1ac33d05387f54b0141512fda61fff1340fa4dad512d5f515a0c2a824be"}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0xcc}, @typed={0x4, 0x47}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000114) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200080000f681e1b40000000000"], 0x1c}}, 0x0) 20:15:47 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xc977fc7beafbe494, r3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)="e1d3dbecf2004812729a07142fa982d7e071fea5cfd58ae785a783ea409c830be9c52ffc4f69b008b0a0def6bcd0fd1a8f5afa209bc884b8be3c66d2f04a08fd53968aa07d2034de5bb80effe71f6465e35d5b49088f537741ee09e2b0366fedecc50523cb84a9faf76896efc027069d606bbe1248ce97238805bd38a57a58b00395a11da3f02c5721c60251bc8c70557e1130425f57c0b76bfbcdb7ba8f7f1da07f505a2260", 0xa6, 0x400c0, 0x1}, 0x2) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:15:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3d3, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r2, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20d315) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:15:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:15:48 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x10, r0, 0x8000000) syz_io_uring_setup(0x2d62, &(0x7f0000000200)={0x0, 0xdb0, 0x4, 0x1, 0x2d3, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x40, &(0x7f0000000340)=[r0, r0, r0], 0x3}, 0x8082) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) fchmod(r0, 0x40) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:15:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:02 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 20:16:02 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) fsetxattr$security_evm(r5, &(0x7f0000000040), &(0x7f00000001c0)=@sha1={0x1, "2c9d780de72168a44ede3ed71b54b2602a2b263b"}, 0x15, 0x3) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:16:02 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) 20:16:02 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x529243, 0x49) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 20:16:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bb) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4de142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:16:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:02 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 1838.374421] FAULT_INJECTION: forcing a failure. [ 1838.374421] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.375698] CPU: 0 PID: 10215 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1838.376397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.377219] Call Trace: [ 1838.377490] dump_stack+0x107/0x167 [ 1838.377859] should_fail.cold+0x5/0xa [ 1838.378237] ? xas_alloc+0x336/0x440 [ 1838.378613] should_failslab+0x5/0x20 [ 1838.379023] kmem_cache_alloc+0x5b/0x310 [ 1838.379485] xas_alloc+0x336/0x440 [ 1838.379838] xas_create+0x34a/0x10d0 [ 1838.380223] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1838.380743] xas_store+0x8c/0x1c40 [ 1838.381105] __xa_store+0x164/0x2d0 [ 1838.381469] ? xa_delete_node+0x280/0x280 [ 1838.381891] ? trace_hardirqs_on+0x5b/0x180 [ 1838.382327] xa_store+0x31/0x50 [ 1838.382655] __io_uring_add_tctx_node+0x1cf/0x520 [ 1838.383131] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1838.383661] __do_sys_io_uring_enter+0x14de/0x1920 [ 1838.384161] ? lock_downgrade+0x6d0/0x6d0 [ 1838.384571] ? find_held_lock+0x2c/0x110 [ 1838.385011] ? io_submit_sqes+0x85c0/0x85c0 [ 1838.385447] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1838.385984] ? wait_for_completion_io+0x270/0x270 [ 1838.386466] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.386980] ? vfs_write+0x354/0xa70 [ 1838.387355] ? fput_many+0x2f/0x1a0 [ 1838.387764] ? ksys_write+0x1a9/0x260 [ 1838.388153] ? __ia32_sys_read+0xb0/0xb0 [ 1838.388602] do_syscall_64+0x33/0x40 [ 1838.389004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1838.389549] RIP: 0033:0x7f27221a7b19 [ 1838.389919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.391871] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1838.392683] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1838.393443] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1838.394200] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.394963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.395726] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1838.397549] FAULT_INJECTION: forcing a failure. [ 1838.397549] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.398878] CPU: 0 PID: 10217 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1838.399720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1838.400619] Call Trace: [ 1838.400904] dump_stack+0x107/0x167 [ 1838.401299] should_fail.cold+0x5/0xa [ 1838.401708] ? create_object.isra.0+0x3a/0xa20 [ 1838.402200] should_failslab+0x5/0x20 [ 1838.402607] kmem_cache_alloc+0x5b/0x310 [ 1838.403043] ? mark_held_locks+0x9e/0xe0 [ 1838.403486] create_object.isra.0+0x3a/0xa20 [ 1838.403965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1838.404510] kmem_cache_alloc+0x159/0x310 [ 1838.404926] xas_alloc+0x336/0x440 [ 1838.405281] xas_create+0x34a/0x10d0 [ 1838.405664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1838.406185] xas_store+0x8c/0x1c40 [ 1838.406549] __xa_store+0x164/0x2d0 [ 1838.406916] ? xa_delete_node+0x280/0x280 [ 1838.407332] ? trace_hardirqs_on+0x5b/0x180 [ 1838.407771] xa_store+0x31/0x50 [ 1838.408108] __io_uring_add_tctx_node+0x1cf/0x520 [ 1838.408584] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1838.409184] __do_sys_io_uring_enter+0x14de/0x1920 [ 1838.409711] ? lock_downgrade+0x6d0/0x6d0 [ 1838.410123] ? find_held_lock+0x2c/0x110 [ 1838.410580] ? io_submit_sqes+0x85c0/0x85c0 [ 1838.411071] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1838.411598] ? wait_for_completion_io+0x270/0x270 [ 1838.412087] ? rcu_read_lock_any_held+0x75/0xa0 [ 1838.412603] ? vfs_write+0x354/0xa70 [ 1838.413005] ? fput_many+0x2f/0x1a0 [ 1838.413396] ? ksys_write+0x1a9/0x260 [ 1838.413806] ? __ia32_sys_read+0xb0/0xb0 [ 1838.414247] do_syscall_64+0x33/0x40 [ 1838.414647] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1838.415192] RIP: 0033:0x7f818218db19 [ 1838.415592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.417555] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1838.418371] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1838.419138] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1838.419911] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.420671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.421438] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:16:02 executing program 1: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x28}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r2, &(0x7f0000000500)="348d5ed85cdd15381c62a174ab7f0433ffaf2744e150ac76a031ef8424b53abfbf20d1a2967a3f862eb1c61efe7762e4b8619b5d", 0x34) r3 = syz_io_uring_complete(0x0) r4 = pidfd_getfd(r3, r0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0), 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070cd, 0x0) unshare(0x48020200) 20:16:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0) read(r5, &(0x7f0000000300)=""/228, 0xe4) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) sendfile(r0, r6, &(0x7f0000000000)=0x9, 0x6) 20:16:02 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:02 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r4, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, r3, &(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x80, 0x4000}, 0x2ef) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:16:02 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) r6 = fsmount(r3, 0x0, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000040)={0x6, 'veth1_to_batadv\x00', {0x3}, 0x800}) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:16:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0xa8) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) recvmsg(r4, &(0x7f00000014c0)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/52, 0x34}], 0x5, &(0x7f0000001480)=""/23, 0x17}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x7fff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001500)={0x2, 0x80, 0xf8, 0x3, 0x87, 0x2, 0x0, 0x4, 0x800c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000001380), 0x4}, 0x10000, 0x3c, 0xffff, 0x6, 0x0, 0x3, 0x7ff, 0x0, 0x2, 0x0, 0x40d}, r3, 0x0, r5, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:16:20 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r5 = syz_io_uring_complete(r1) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4000, @fd=r5, 0x2, &(0x7f00000014c0), 0x0, 0x17}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0xe2e) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r8, 0x0, 0x10001, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000040)={r8, 0x46f, 0x1, 0x6c}) io_uring_enter(r10, 0x6b5f, 0xc9dd, 0x3, &(0x7f00000001c0)={[0x10001]}, 0x8) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r8, r11, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:16:20 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:20 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) 20:16:20 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 20:16:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:20 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x434, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1f}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x10000000}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x9b}]}, @NL80211_ATTR_TX_RATES={0x394, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x16, 0x12, 0x9, 0x24, 0x16, 0x6c, 0x60, 0x6c, 0x41, 0x2, 0x7c, 0x4, 0x5, 0x8, 0x3, 0x1, 0x18, 0x2, 0x4, 0x36, 0x36, 0xb, 0x48, 0x60, 0x4d, 0x30]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x200, 0x3, 0x321, 0x1, 0x8001, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x48, 0x12, 0x24, 0x19, 0x1b, 0x6c, 0x4, 0x30, 0x3, 0x1b, 0x4, 0x24, 0x60, 0x36, 0x48, 0x57, 0x36, 0x1, 0x2, 0x48, 0x14, 0x24, 0x1b, 0x24, 0x6c, 0x30, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0x7, 0x8, 0x517f, 0x7, 0xc77]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x60e0, 0x5, 0x1f, 0x8, 0xb3, 0x3, 0x1]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x5, 0x7}, {0x4, 0x4}, {0x3}, {0x5, 0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x1}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0xa}, {0x5, 0x5}, {}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x8}, {0x2, 0xa}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x4}, {0x2}, {0x4, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x1}, {0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x3, 0x1}, {0x3, 0x6}, {0x2}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x5}, {0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x3}, {0x4}, {0x3, 0xa}, {}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8c, 0x1, 0x8000, 0x228c, 0x6, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0xcddb, 0x5, 0x9, 0x7, 0x4, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x6c, 0x48, 0x12, 0x3, 0xb, 0x3, 0x4, 0x1, 0x48, 0xc, 0x5, 0x3, 0x5, 0x48, 0x36, 0x4, 0x3, 0x48, 0x4, 0x36, 0x9, 0x6c, 0x1, 0x60, 0x6c, 0x8b, 0x18, 0x60, 0x12, 0x1b]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3, 0xf6, 0x9, 0x204, 0x6, 0x40, 0xff, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff, 0x1, 0x9, 0x5, 0x79f, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x5}, {0x6, 0xa}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x13}, {0x2, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x2, 0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x5}, {0x0, 0x8}, {0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {}, {0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x3}, {0x2, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8, 0x6, 0x1, 0x0, 0x0, 0x7, 0x4]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x24, 0x3, 0x24, 0x16, 0x36, 0x1, 0x5]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x3, 0x9}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x6}, {0x7, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x4, 0x5, 0x1f, 0xdf, 0x8, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x4, 0x0, 0xfffb, 0x8668, 0x9, 0x7fff, 0x6]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xe68, 0x1466, 0x2531, 0x401, 0x3, 0x9, 0x8]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x60, 0x60, 0x6, 0x6c, 0x36, 0x6c, 0x6c, 0xc, 0x12, 0x20, 0x1, 0x1b, 0x48, 0x48, 0x1b, 0x36, 0x6c, 0x12, 0xb]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x9}, {0x4}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x2}, {0x4, 0x4}, {0x5, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x5, 0xd, 0x1f, 0xd947, 0x5, 0x37a, 0x9]}}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x3}, {0x5, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x3}, {0x6}, {0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x1, 0x48, 0x1b, 0x33, 0x65, 0x18, 0x4, 0x4, 0x9, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x4, 0x5, 0x7fff, 0x36, 0x9, 0x400]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x8}, {0x2, 0x8}, {0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x6, 0x3, 0x30, 0x18, 0x12, 0x36, 0x5, 0x2, 0x12, 0x9, 0x4, 0x1b, 0x24, 0x12, 0x3, 0x4, 0x6c, 0x5, 0x6, 0x30, 0x48, 0x60, 0x30, 0xc, 0x16, 0x6, 0x36, 0x18, 0x3e, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0xfc00, 0x80, 0x1000, 0x1, 0x1, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x200, 0x2, 0xe36, 0x9, 0x9fe, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x24, 0x2, 0xb, 0x36, 0x6, 0x24, 0x48, 0x12, 0x36, 0x36, 0x30, 0x12, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x5, 0x5, 0x0, 0x800, 0x4, 0x8000]}}]}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8000}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x80}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfff}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9e}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x85}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3ff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x101}]}, 0x434}, 0x1, 0x0, 0x0, 0x20}, 0x664ffef20b50d73a) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000002e2f66698000301f"]) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040008) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1f9) fallocate(r3, 0x10, 0x2103, 0xfdef) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0x8000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 20:16:20 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 20:16:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105302, 0x92) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000001580)='./file1\x00', 0x50200, 0x41) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x5840004, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x4}}], [{@uid_eq={'uid', 0x3d, r6}}, {@uid_eq={'uid', 0x3d, r7}}, {@obj_user={'obj_user', 0x3d, '\xf3['}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@euid_gt={'euid>', 0xee00}}, {@euid_eq}]}}) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10010, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2}, 0x2) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1856.181434] FAULT_INJECTION: forcing a failure. [ 1856.181434] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.183952] CPU: 0 PID: 10267 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1856.185479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1856.187334] Call Trace: [ 1856.187924] dump_stack+0x107/0x167 [ 1856.188755] should_fail.cold+0x5/0xa 20:16:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280), 0xfd0f, 0x482180) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read(r0, &(0x7f0000000900)=""/142, 0x8e) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x454080, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x5) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x80040, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000840), &(0x7f0000000180)=ANY=[@ANYBLOB="939f03827d69a7890404a94e0e4cdb0706a55176691b80cd11c797ee47798c1046ac31967b06201b1a020000005b6550208fac8ac3e695376aeb5ae903002c93a0762cfb41be25fb7394dbddd40000000069"], 0xe, 0x1) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(0x0, 0x0, &(0x7f0000000800)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x301c00, 0x40, 0x18}, 0x18) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 1856.189606] ? xas_alloc+0x336/0x440 [ 1856.190756] should_failslab+0x5/0x20 [ 1856.191783] kmem_cache_alloc+0x5b/0x310 [ 1856.192732] xas_alloc+0x336/0x440 [ 1856.193558] xas_create+0x34a/0x10d0 [ 1856.194449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1856.195659] xas_store+0x8c/0x1c40 [ 1856.196508] __xa_store+0x164/0x2d0 [ 1856.197352] ? xa_delete_node+0x280/0x280 [ 1856.198329] ? trace_hardirqs_on+0x5b/0x180 [ 1856.199336] xa_store+0x31/0x50 [ 1856.200123] __io_uring_add_tctx_node+0x1cf/0x520 [ 1856.201213] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1856.202432] __do_sys_io_uring_enter+0x14de/0x1920 [ 1856.203560] ? lock_downgrade+0x6d0/0x6d0 [ 1856.204503] ? find_held_lock+0x2c/0x110 [ 1856.205436] ? io_submit_sqes+0x85c0/0x85c0 [ 1856.206425] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1856.207526] ? wait_for_completion_io+0x270/0x270 [ 1856.208656] ? rcu_read_lock_any_held+0x75/0xa0 [ 1856.209899] ? vfs_write+0x354/0xa70 [ 1856.210751] ? fput_many+0x2f/0x1a0 [ 1856.211563] ? ksys_write+0x1a9/0x260 [ 1856.212443] ? __ia32_sys_read+0xb0/0xb0 [ 1856.213562] do_syscall_64+0x33/0x40 [ 1856.213585] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1856.213598] RIP: 0033:0x7f818218db19 [ 1856.213620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.213631] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.213654] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1856.213665] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1856.213677] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.213688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.213700] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1856.217914] FAULT_INJECTION: forcing a failure. [ 1856.217914] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.217940] CPU: 0 PID: 10268 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1856.223622] serio: Serial port tty23 [ 1856.224269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1856.224278] Call Trace: [ 1856.224312] dump_stack+0x107/0x167 [ 1856.224339] should_fail.cold+0x5/0xa [ 1856.243685] ? create_object.isra.0+0x3a/0xa20 [ 1856.244815] should_failslab+0x5/0x20 [ 1856.245763] kmem_cache_alloc+0x5b/0x310 [ 1856.246748] ? mark_held_locks+0x9e/0xe0 [ 1856.247745] create_object.isra.0+0x3a/0xa20 [ 1856.248824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1856.250072] kmem_cache_alloc+0x159/0x310 [ 1856.251086] xas_alloc+0x336/0x440 [ 1856.251964] xas_create+0x34a/0x10d0 [ 1856.252914] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1856.254198] xas_store+0x8c/0x1c40 [ 1856.255087] __xa_store+0x164/0x2d0 [ 1856.255974] ? xa_delete_node+0x280/0x280 [ 1856.257016] ? trace_hardirqs_on+0x5b/0x180 [ 1856.258093] xa_store+0x31/0x50 [ 1856.258915] __io_uring_add_tctx_node+0x1cf/0x520 [ 1856.260124] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1856.261423] __do_sys_io_uring_enter+0x14de/0x1920 [ 1856.262631] ? lock_downgrade+0x6d0/0x6d0 [ 1856.263640] ? find_held_lock+0x2c/0x110 [ 1856.264596] ? io_submit_sqes+0x85c0/0x85c0 [ 1856.265651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1856.266757] ? wait_for_completion_io+0x270/0x270 [ 1856.267931] ? rcu_read_lock_any_held+0x75/0xa0 [ 1856.269017] ? vfs_write+0x354/0xa70 [ 1856.269943] ? fput_many+0x2f/0x1a0 [ 1856.270785] ? ksys_write+0x1a9/0x260 [ 1856.271696] ? __ia32_sys_read+0xb0/0xb0 [ 1856.272733] do_syscall_64+0x33/0x40 [ 1856.273650] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1856.274921] RIP: 0033:0x7f27221a7b19 [ 1856.275833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1856.280392] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1856.282252] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1856.283994] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1856.285717] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1856.287435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1856.289159] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:16:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4000, 0x8) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) [ 1856.374837] serio: Serial port tty23 20:16:20 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000200)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) 20:16:20 executing program 1: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) r3 = request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f00000004c0)='\x00', r1) keyctl$setperm(0x5, r3, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "17d28eaad5aaa04664a898e28ee50072f4e3dcba5f09e75125319d861152ab15446ce46cf1fde2fb1651c3d5e17a6c95ec1f9537cc9953ea59b9b872e75d60dd", 0x1f}, 0x48, r5) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)={0x2, 0x0, @a}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='id_resolver\x00', 0x0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x14}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:16:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) syz_io_uring_setup(0x486d, &(0x7f0000000200)={0x0, 0xf51d, 0x4, 0x1, 0x3d9}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x3f, 0x0, 0x101, 0x3}, 0x1) io_uring_enter(r0, 0x44d5, 0x904, 0x2, &(0x7f00000001c0)={[0x10000000003f]}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x14001) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) dup2(r7, r8) [ 1856.585768] Invalid option length (1048265) for dns_resolver key 20:16:21 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:21 executing program 6: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)={0x77359400}}, 0x20bc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, &(0x7f00000001c0)={[0x3f]}, 0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x4000010, r3, 0x8000000) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r6 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x4, 0x7, 0x3, 0x0, 0x9, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x8700, 0x3, 0x31, 0x2, 0x82, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x1, 0x10, r4, 0x0) 20:16:21 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x101001, 0xb) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = signalfd(r4, &(0x7f0000000040)={[0x2]}, 0x8) io_uring_enter(r5, 0x751c, 0x4492, 0x2, &(0x7f00000001c0)={[0x100]}, 0x8) 20:16:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1856.822421] Invalid option length (1048265) for dns_resolver key 20:16:35 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 20:16:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x966b7000) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6d, 0x3, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000009, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x3a, 0x6, 0x4) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ff9000/0x4000)=nil) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:16:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)=ANY=[@ANYBLOB="ec8aeb53f498e1cb0a36380e7394", @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) 20:16:35 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:35 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0xffffffff) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmmsg$sock(r9, &(0x7f0000002180)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x1}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)="c06cf27ba696d28b8151d1c769c0089dcfb6f16a208e9d48470e7fb6b13af96f37abc8f03c3e35ff5d00a1ee1bcbc8ce152cc14c9bce32adb90a78ced523ac7db42c8eae72da0ebddfca9a88efa0a8dd22087baf2c70b0ee22048e9ecbedb0ad9c7140912e7d27603fb6b13fa290668b9e5dff7438956afe3c46120779441d50ef0b6732b43085e5ba0b45bf0dfcb8f2aa2d5f9936727242ef53152fc43d58a8b549068cb78a36a0423d86fabb4207a1e178df2634f2a55635ee5d841977", 0xbe}, {&(0x7f00000003c0)="3587a3a1f2c488e2ea5bd4a358d3d48181f5217f019af1d78de324a6e8bb7d6905669d8022e5b000ba29411dc0fb1ec8edafb6cd9465776246859376a87efae0183572dde51491115c402eb66f497b1aeed3a85174a6cff5ab361b1cbea362e5892e6fbca0e1ace7802cec8ab16e9aa37475e62c2460fa6225b9359c2bdc6ed6f76e9686b345132ca5a08870d765a9cd7d12672b11ece6d7dc3341102fd5804eab05f8a7503e9e2552082f190b823a25f1a73c33c1cc51b12b48fac37b4c032926b1848a1abee712214e1c59dcaa3b59466cbdd4ea76eaabe7278a28a63c685933ba8ad19929a6a4b4112550113922", 0xef}, {&(0x7f00000004c0)="5bf22ef256cb8680246c52395a64237d83a62e5787c2d7652ae8bfe9121e84119605d6be851d5e62e2b9d2fa20c8395e6ca38296ed254cc647de691defd3cad2aafff504dfdbf9a33d86b21a40deb45366d6867e95a893d4d88d9e261b739a131a2a425d53222320247522bb0443ab728609a24379863158af4b8b39c678d3fd6f7f5510fbaa42fd7e086a68b61be7", 0x8f}, {&(0x7f0000000580)="4f48e0a9fe568140d668f8c77f242ae758d9aed23487973052962615bff8b9fefe9d6e37a9a39c0218cca43640152687459986ada408ba6a127ab9e6ede1e47a68c02a52531964c68b49622fea734c52bcc777f28bef244006595f68e8f5df98e2a755b44570172ad0835e71d5e2e6fb82874caa3352dd1300bed693633cbdd81a8f320c7dc523b5d2ddd8b86397b519102d94ced5dedf6e0510d81d85b7c5c68abc7890631d6fde71c4a54e28d395de15c585413b7b8b843711d238da568a343596471d61f45e7f8e53fcb8bedb87587bdcb3830517ee505b4a1550fa3eb50cefca3f3d7df8c47c49f63c", 0xeb}], 0x4, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2c}}, @timestamping={{0x14, 0x1, 0x25, 0x86}}, @txtime={{0x18, 0x1, 0x3d, 0x49}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}}, {{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x2, 0x2, 0x2, {0xa, 0x4e21, 0x6, @mcast2, 0x1ff}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000007c0)="2e5bd30e08db63234f0c88b68fa2fa20599e81fa0098d0f41c921460fca6", 0x1e}, {&(0x7f0000000800)="7b5020f085c87f31e7878046ff51d20a77ce8a373921ac9eb3626ce8953be4c73ba06f7fa56b415d5577889e02d607ff69e722cfd7f83fb61df138bb19416a1f8a438baf3c746860b8ed45161ada1ed909b2a52e08bb693a5260cb9cbd59347dc83548b9278b62cd9e8660b1b9e9b71f354282b5b0039f8ae930ffae396d689a6291438cca75e89e9f60b197776abf76e4a570751e91b966ceb13468b5f6dc6d9e8a70739644e10a59100acd584367e6f63073ec5ee76f3dfb071f6b51d944e324161d456c4e0c0e2c37d85fc27d115c876f71ed711e54c3721d104b", 0xdc}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="c0f628842ea332e024", 0x9}, {&(0x7f0000001940)="9f77f69db9095eba71b348f353447cbdadd2f31d9e43c2328a07f10e0c1b1c34de659553303369dfb813812840e89193373238ae7f60099f012c9ffe354eb76c58bc3665c3d66f769a715ea936cc87fe68c0cc1ffe471d2a99584e5b924a0278b4f4bb92a251cf455f53116559f33ecdeaead228077522c6784e9857da16378047657940391ba7049615ffa967d3236df0b5e77e28bbfc40379281f951b47b4c1b59d9f3a6b2cd1dd4c1536d7e299ec26ba0", 0xb2}, {&(0x7f0000001a00)="edd3afe3211ec15ce4922a501fe8b5a6997fdae48252e60cf80f44e9f081f466b3f52eb1de8aba30f59b128006d60811738052c2fb4b36d98dd5eaa926ab7d00f42f839e73104d0473b6f0733ff5fbbf00", 0x51}, {&(0x7f0000001a80)="6cfe045a64d0b82d2e6f90313c7cff1b15e2c0115f78994275c5aabb3a622c2850064a78fe7d4687f880aee5e5407c484d5cde4b645d941046494bf29c9d601fc2610d41b8d996c0b7e2", 0x4a}], 0x7, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001bc0)="3d716085f88d4459a15eac30f1a0b019c2e069a6deb5fc9e75bc4a587fcf7d36c0ea003cb629957ce61eb8c0028ccc34f9d14f707fa3c3bd9f412d88852f6c3ebbc994f7f5f237c4c3826b8b973e30342bdd9ced6ecde386c3904496f378aa2e4f4fe7af2ab13aec6a5c7bb41da351c6ad17a4b42bcf765751900aec842c085933ca6c4bb1429ac258cecd2c617007ca8996c9a2e7acc885ca", 0x99}, {&(0x7f0000001c80)="69e6ca914e571dd664d3fa7a788c83366430a8b8e4db4bcf3edc9bc6d4ea3b4192aab1fec525563ab165d562f7bab9dca25011a53def9535fa0c628d50dc2f5711ea1ea25143311069f5371f0afb4f0a421b21cc0452a286f1b46a780db7559cfa492b6337619bf43688c360ba32ad8ab3964c08a02e7f6da114c122bf36b2dc635b7f692d4308a98f6f4834d1ad6ac9b9886f7f635fe9368b6d96ee381c847c96720366a5577a863c06a22b7d6b602bd0a25905970a252741f86becb87f150edd668490883d43f5e1ac9ace7196b94b0c153e237de7a6c2c661328151e39cb5d0c4a7e8dcacc10b87", 0xe9}, {&(0x7f0000001d80)="0d390f32a7816d3fecb5c4be002d8fb61c31c274df2e8edc8cdc0348cb866e33255a9507d73c96aeb36d187abaf6fe4b99614229cfe40b8c3b36c258c84d2085b755dfa2f587d962dd50e087304d775568cdc2cb4f23a3d3a088266ec3cff60bb3fb5a304c416e", 0x67}, {&(0x7f0000001e00)="9135841fe5ab5f00f70e0b2f246b380256fdeac16d98a77c4887d8764846791921ac54ae2106d680dd68c415c27558a679f86b1f5b491b3fe598c1a4d8c7b68922530eec03597a1bf85d6656e98e41c56d2aee640357a61b0c6fed88f61b0e464986", 0x62}, {&(0x7f0000001e80)="e1bc69db34454e3c9676f8901db486510c4b65af06ae8d804670f1e321aadd4b0f8bbbee391b8a4cff0d7d245cec5bde18a00aa49f429cf9a0b92b1c40af4a0cdba83ac1946113c0290980acb9b038f1533887bd59b20f63bab928ca7215af0c32c46af0897f816be5fd9b1d432bf5e269a7151560cc21aab8a4dfeaed273ea57215c14264cefde00d2d499b91caca10cf2436fa233b57ee2c696a2a0d1a8c54c12c69e4c31716d2bd133239f5097e9a5e38e2365c3fb3e8084784d295da86884282e2bdda3189750e6ccf54d311291018c08f5d7fb9d5ba0065eddc7304cdacab254b97f683df462a0be79a8b4846", 0xef}, {&(0x7f0000001f80)="c9253b788723ede1e44b5edf59dd110efbb807b818eb2e7ca93b7f0e504faa1469f38ecb9256dcc5f665313276a91043fe4213622df7ad89789b7390f3111dbcf584a7c18a09af5ef6b3afca824a173424863b1145", 0x55}], 0x6, &(0x7f0000002080)=[@mark={{0x14, 0x1, 0x24, 0xe41f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xf0}}], 0x3, 0x40) 20:16:35 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) 20:16:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:35 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 1871.577773] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1871.625100] FAULT_INJECTION: forcing a failure. [ 1871.625100] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.627804] CPU: 0 PID: 10338 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1871.629273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1871.631096] Call Trace: [ 1871.631666] dump_stack+0x107/0x167 [ 1871.632449] should_fail.cold+0x5/0xa [ 1871.633251] ? ___slab_alloc+0x155/0x700 [ 1871.634089] ? create_object.isra.0+0x3a/0xa20 [ 1871.635054] should_failslab+0x5/0x20 [ 1871.635850] kmem_cache_alloc+0x5b/0x310 [ 1871.636731] create_object.isra.0+0x3a/0xa20 [ 1871.637653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1871.638716] kmem_cache_alloc+0x159/0x310 [ 1871.639585] xas_alloc+0x336/0x440 [ 1871.640343] xas_create+0x34a/0x10d0 [ 1871.641141] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1871.642202] xas_store+0x8c/0x1c40 [ 1871.642974] __xa_store+0x164/0x2d0 [ 1871.643715] ? xa_delete_node+0x280/0x280 [ 1871.644598] ? trace_hardirqs_on+0x5b/0x180 [ 1871.645506] xa_store+0x31/0x50 [ 1871.646196] __io_uring_add_tctx_node+0x1cf/0x520 [ 1871.647198] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1871.648316] __do_sys_io_uring_enter+0x14de/0x1920 [ 1871.649352] ? lock_downgrade+0x6d0/0x6d0 [ 1871.650218] ? find_held_lock+0x2c/0x110 [ 1871.651072] ? io_submit_sqes+0x85c0/0x85c0 [ 1871.651985] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1871.653005] ? wait_for_completion_io+0x270/0x270 [ 1871.654022] ? rcu_read_lock_any_held+0x75/0xa0 [ 1871.654993] ? vfs_write+0x354/0xa70 [ 1871.655775] ? fput_many+0x2f/0x1a0 [ 1871.656553] ? ksys_write+0x1a9/0x260 [ 1871.657341] ? __ia32_sys_read+0xb0/0xb0 [ 1871.658210] do_syscall_64+0x33/0x40 [ 1871.658994] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1871.660077] RIP: 0033:0x7f818218db19 [ 1871.660856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1871.664719] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1871.666329] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1871.667834] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1871.669347] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1871.670838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1871.672339] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1871.681405] FAULT_INJECTION: forcing a failure. [ 1871.681405] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.683937] CPU: 0 PID: 10340 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1871.685472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1871.687223] Call Trace: [ 1871.687772] dump_stack+0x107/0x167 [ 1871.688540] should_fail.cold+0x5/0xa [ 1871.689343] ? xas_alloc+0x336/0x440 [ 1871.690121] should_failslab+0x5/0x20 [ 1871.690935] kmem_cache_alloc+0x5b/0x310 [ 1871.691788] xas_alloc+0x336/0x440 [ 1871.692545] xas_create+0x34a/0x10d0 [ 1871.693327] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1871.694424] xas_store+0x8c/0x1c40 [ 1871.695198] __xa_store+0x164/0x2d0 [ 1871.695940] ? xa_delete_node+0x280/0x280 [ 1871.696824] ? trace_hardirqs_on+0x5b/0x180 [ 1871.697719] xa_store+0x31/0x50 [ 1871.698429] __io_uring_add_tctx_node+0x1cf/0x520 [ 1871.699505] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1871.700744] __do_sys_io_uring_enter+0x14de/0x1920 [ 1871.701772] ? lock_downgrade+0x6d0/0x6d0 [ 1871.702635] ? find_held_lock+0x2c/0x110 [ 1871.703485] ? io_submit_sqes+0x85c0/0x85c0 [ 1871.704436] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1871.705463] ? wait_for_completion_io+0x270/0x270 [ 1871.706487] ? rcu_read_lock_any_held+0x75/0xa0 [ 1871.707436] ? vfs_write+0x354/0xa70 [ 1871.708207] ? fput_many+0x2f/0x1a0 [ 1871.708980] ? ksys_write+0x1a9/0x260 [ 1871.709761] ? __ia32_sys_read+0xb0/0xb0 [ 1871.710616] do_syscall_64+0x33/0x40 [ 1871.711391] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1871.712459] RIP: 0033:0x7f27221a7b19 [ 1871.713218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1871.716979] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1871.718522] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1871.719979] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1871.721444] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1871.722901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1871.724378] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:16:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001d00210c00db0400091f499b01000000b6b85116efc00ac1a733abacfc1270318a8a3127cfaa5095784b6be193222c1a6edb27ef9d4eb98dcbd1d8cd269ba70cb23fadef91c28b51e85ffe5c4e08585e54e18a3d859da7ff094eb36d07e5b5ca9205983d62f1c119c6829a9c58e8b3498ae37813d8387eef8ad5ebe481b9ae644e17c3e24a96970f76f4ac98c21488d7d8d6dce8440e195c4da365abd442d231c10100005973071c"], 0x18}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x6228f9ba, 0x2c, 0x4000000, 0xffffffff}) 20:16:36 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1871.865252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1871.880184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1871.895945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1871.903491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:16:36 executing program 1: fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x31) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x0, 0x0, 0xc00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000080008000000000000000000000000000400"/256]) r2 = socket$netlink(0x10, 0x3, 0x12) fcntl$dupfd(r2, 0x0, r2) fchmod(0xffffffffffffffff, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001e00)=ANY=[@ANYBLOB="e81400001600000029bd7000fddbdf25010000006b653db851debe60182e903f4d6906fdbfa3b1389faaca627051de2e371fc374710095e4a6382e5fac1da1915a6aa5d0610fbc9dbcc8e0b55d5f1c7b2a805fa1390cca059d0a982b6abcc3d638856bea25b0e3df9521537f79693917549f69ed6102759484bd1735dfd780cfea4d412e274c632bc80ce9b324729b363618ae5c283fc58fb6bddf7f340e6f926be7dca5b03210457090ed7c954346fdf47d77bc0c36fd3ef30e15e0bf370f95dfce2d06d0388f2f8029b6800bd593af637f7e28b6f777b2d0251fe55eb905a72a7412758b119ad7ed92e2de232990e5bc3635e58cf99750673ce113c5ecd384381628a3db9640c9898ceb4887289c28909d9bb16756647105997e1c252a5d0845c76f9c58f353af639988254a01952df078b349eba143f952b97e33302c80dcd5bdf6bb1a520c6f5d2a4264e004ad69ba55ac7ee4ff8506b326e881064f840118baa62cb32e547b3b28a93405a8a7c32470a13ead3afc2da8504f76e469ce0b6d769c24387f17458a32787fb8ba9c58b683cb40fe2b0101bb5dac12e94da8a912b2d575ce961018ccb0c3503cbabf645b21e716dd8b1d557bd1c6f98c92aa2eeff138beec7718fe64201f5d9f7a2db78bc46cdae1437056a78eb62fd394446e1d06818ab46309aade293ea5751dfc953604001f00b0122a8008008b0006000000bebe0f931473e1823f53695bb65f22865703372bf9753604513daf520f5d5e1ecd456f80dc47d1d7b971bd4d0eec8d50c70c17c6169e60550c3921ac2dc30961f7b95c0d2175c79a1bebeb4ccb71b4c1ba6a98648dcb5de4bb8991af32c54c59fcc41a6ba01d8cda5cdf7012eb566a63f014aecb83e59db8d6e59c1d4f1ac959f6724cacf55b8b1e7ce5de0bb4235a73afafbc6da13951d9b089749989c125a9890b05c6abffde9dcfe40ade4e2bfb988ff166cc43a98f4ddd3ba0ef48ecbc5cdfd72798a2ed2c237a192aec66975ccb1041724389dfed98d0105cf9a24669bc0253fbcc57f2edb9a3119d3269d50bebe7dff8573aa9e7422d5d1e8bf18074f9cc0b1c0048be34827db50535f083b535c2643a92c7e0f85911852b719712689d0e198c5715277acd940e469243ab5f456b7a739839139b84823ae270c666f0aff35d5767e9e2f881a8d4c9eb99ff926ac36486e6cd349a071176287afa882a06f057e07ac17e43aedcb0c8f23cd2af0e050de416de94da13a03e6b333f20e7cfc91d9054fae2194a7d22fd8384afa2f131ab7a613f446567e45a3824732e55dc6f9cf5b48c0159be794131854a1a2b49b201a72d87ee1f5bef471c37690e2c169f4b5aef197f56ba59a9e54572e0ab1726c4a4eee880272c133a0f9555536cd29aa6518a0f39a23ed48acfc155c42d7f9a8d70514729b8e74536bccb225a0dcad75ef7f6bb5bc945e1a88bd517b5ed4eda0f7c72a7d674645611fa7352f60440e9266de471f01e9dce2e82c0a843d04b09edf3e90288cd97ed50bb0f6831544b2fadd45c486cab19d4e02591ab2f037ba23d2409c6d8af4a075f9d96aa580e267f36450825209df5be7098afd1fdc055ff658de4ccfe2d96be3a0fe7c082412fea4ddebbd04f5128228cccbbfa4c38aee6687de5613303c577402c5f7a3d0baf12a673147d2a30b132560ffadfddc6b9693af9da70169309f03e8e8a810f3497ead08d818a665e314645b180277dbdf79984e812c5ff1c740a73733e3be52c570d8150c26bcd5e33e036958345040fda73d3f82b3b99ad3bc796b0794b61c9f42a9a6c0d212c3397357131545b13c1da0e81ed45d4f7fcb88dce65e7b5eedd85f1c83ca0edc00160cb42549b0baec114815c69f6c35e88efae2b28250611ffd29f05ba4bdcf04171a98a8225e5731c3b2b27050f062fafd976f26c16121f28d087bf3d6cc8fb5a2dff0c948d19608dd18bb9c80ce91d7aaf7beae230c13a9bcf6e8cbda30c47cbc2a504cc53921fc8acaa5ee517ce6bd4d36204fc9322eafc2b0b3dcf67c859b5ac9a412cc65e0da7ce13998d4149173241285ad0098309e4b7114ab5ba58b3c470b9b931cb5c301e3aa4cee76b15647afe70b179f1a00f4d871429d9e3f5df4a999707f7f7edded65d0388e38f07d134438d195b08b19be17f766988842d9457277df91bfb9376ab7cf5d1c7f3fc408723de52a89b62872a6126687007c42ab155617314d8c76006034a95b7242014ec149bdad8a9ee78805bbbd3e67930659d5d797eec7ee933909a600f57027495d787a76556a480f33ef49a221ec16acf75918101c883ccff6d03e00331e4433d60b03ef980e7841ea077f7f99e3afd08bb48defeaa8a739186a5bd6275bf2bdadfb81261143585e76bf75a7eba2d847a84a8b48896a8c225669f683047963f77a4bc0b37d8d61e6d34270559a2b261e60df0b2c009a207435fe41c9f2f82b8864982aac9a1f14d9d6008878289b7bb678d9c8b3d6d733dd8bd33ef920f3a17f9a4c2dac3667134f98ee904779d60ba378267999d143be578554bba7043f89ac19d48660b839d0bc80d954d8253515a5a71ce698fd2d018207ec3e60f7b3607e19fbcc9d4b14fbdf3b814859a5823f27f47cd4b305e1eaefe52f42fb3ff2112dea165f32af737dfb228ba34cd1d782ea82c0df9d9b9b1b842cd4c768867f2b86687025fe7e97d71aa855fcb1ca31ea4449d2bf393958c95453322d361f0619886f769740723b19b736425ab77ad51af6d4c88439586f9a8a222961f5f8ec15d3353fb9b209fa8c8ebf5ed5ea59d0f9299a5a3c99fc5f236ab3ebfe0ce668cd0dc9688da94f1cbdca313ce70da423bc98448ef87771d3311154a0a666d9a58228f3af0a088d08f5e3a04c870bff9d794cca53e030689c57fdbc7a28291b9e678ec79abc16aa79745c92f6695702b9bab5f31570298d6e0ce2902b26334ee69b6d459e27fe28073df65a793edbff27015517b36c3c0cc9f2e9351bc9c692a5ff427c3d5e7a7380fb98f7ec95db7382db66a061e5e0f268bae8a2f1d8cfcc019b8b6cb0a60a2741c39e2a3f3b5e6902c1d6abce97573c0b0dd78aed0f48341c43391593906cc3c840416a1eff5bada20c736e371e761850ce52c0dc534027921e687f5f3ed993a07ece796bdb83d20f890d2c4d5fc63a46ca836eed5f19089e04cf24ae49d4a864910d72336b97e0863948b257586851e645d6248d030e59a6e16a93d5b509baca21a7c0da589219a1ed3a637ef78373093b4c4d96cf8b855384f3889b075dbdda732b302cdfb25441acd85dd2b6ccb0cafdba4ae4c05c5f2e421f5e2db21a38a247e2e328935edeca9d04371e420ed56be4c9d999725fdfa096ab91355f92a310099bc7c563339cae497778e5c73fbe31e870eda3839a0afd3ee53b26d2ae2ac3153bc1f7ca0df4e1b732a84349a32728d3cb7a68a02301c970dbd2685be27c37da4958c346a4da633447b5fa56964eaea83570ad1a3f5dbecff699bd79bdf9865bf0de74192527ba8c91395efcda74bf349b9330c452030d95f18d524bce6e115162d95baf294ae2e25ea1d3e7733d71c8f43f9f797a9e0a1e98bf5997caa36bad7c287f448de374adc623180f1d79555443d122c0417e2f85226a1d21017dff87faab2381195c7e8d2f5dc53503bcd13537173e39b61b115f7630eb7bf5d97e852ef721e264801bc686ae569523ed79b3ac93998f7cf460e390b33126cf17cb4f850650a571ed58ed510f8175c83efb0dc615effe7ec1f42d011224fc71b9328e8b77470a8643c5b321fabb40501c27a5b566e83b08e4804efcc0d04171aa652f3e44b9449f4a132e989f3e9458ac7f111f651299d94ad9a5a0851464da274a37a01206888db2292560588f9e6c16a47efee2a733e526b345e951df59142c384d5edade8f3d54d4d431b014b977d97be8ec5fe8a3d3359e2bf7f23240ab4b7db333132efb171caa8d7cdfcddfa02b71ce6e587bcf7c2001ed1d2561f1a2bde813cdbfacb6a251073cb17fb9e36b483872f6e80a3c89b7614da1dd97a9ed784deea77a72c62a4c545a11cd8953cddc1f44b9bbfa204c1b61765a6c63505ffe0f218476ec3ba92ee19b571faac499d843179d1bc5ec2ad5725c65fc16ef3392a2264df2e59242c07edc7ad3c8e1bd3ca6fcc96037a359b485d5115fbcc588f2641a98de0a3719d38194861b12df16dd8f2ef8c7c709143fe0becfddeed14778a60ad8e4c856267794512e864c54231c0fcb1543a5a0837af10e60972b2db92f3be030f6bcb528c6ddf5fe3c9b72804cf003c7c77af19106d5a0a69a1c0735bfa3b541bf968d7e3679d5e1e258d88f59e3a323e02d5e48d5ec91172a498bc93677629cd27190e726aca3166c123c7651e273b70e840eb9aff6f8ba03bb88517ca9ab5c429733877c99cfff85b50ad75f41321e46e3ed54245aed196b5553f739799b7d38f08813c0b93799726b70c9b54252f2a7473db9c8a404057440ac3289604dc2c0acef48a952a1aa2b211a9c04d7e93d7c2cabbd541ff50d565fcebb2bc1c5e3eb42ac23657b1c8367f4e0a2f2b600ae226d773b7ab71247c731e1e6d22d1435597d38f66d2d41be4143b70042867c10c8d347282a94a5634382ce0d559a8b326c4e3bf4493e13091be78b49e0c4f1471921c599b915dac6ce7e0d2ce56c2e58710c1a4ba4256e3fe53e64a3a4d0c32a64497fd857ec1a5b065732ffc98183c53a68ab1071fb5cf996c8a5a27da56655440656c7aa7c95f4f5c52658beaf415e858db1539e8428b8cecd3351cd6585fb34e66a69159891b231c66046450274454d320b0a0ea1c7ccd73b057f68f7e7f3e8f86ca815adc65cfb641e3eb1c90002af6de99eb1056583bf67abf47b0c5725ccfd26a6a9f7048f31c50e92d9e38f53b04246e801be21b296aa2d9ada708b81ee1b9eb784dbc578e6b844deb2143a778a6e06961d161e31f28bcbba39f9ba300b45a80e78b9833dd5307749b278d46f065b2607a6f71f893c353ffaa44263eb6a0fa7e08a2e4f62b5e1607dadfb6ddf41503b992b4d9bf5d9ad84eabc1464f62f8a105a2c62f54c2eb685ed59bfa9a7e2ba6fe76ca90aa0a75a7a4f0f94a6d76adafc2601706be414c471d4ee5de66d01f93f2da5906ac29078456348c26708d9872eb8394f2ac2c4d5f2f30582a73591c264a0e2fb8a841b0a55ba39f8365462ab8ae0e69fb8f20663044bf6db94ba6589ef9354b8c4326f37da602125801e86ae278985b9bf793f47b9189e166899bcf084934069e68a344c9c6dd41c01c637ada67b42fec79d17faa1671475edb482663f5f60cc7537e46781fa110506e1beb817df4a211b9272aece552a77bc8adcfa8e41511a63be6eefcc8c219ba6509ba2187a179c0475d8faf06bbc7a265f3e06230d5ba6b1a75796845333ae99803cc88bb6503d956327cb946707c049ce6368708d776e21368fd5c6c873c5d0628b39e29a8c021c5e336557cfd98ac7032596df4554248977db900e62a9dfa50f8ec792f83380673940ad952adf772ae804e3c2c2eda78f1ff12979a7c3c8ad0b8f019abc9cfd5680db4e0a2f4bcdbd70bd1dcc0cec43895fcabc0571f15d20d8c0cc518a0ffaadc9f79590991f728415ac3801b60dae628e3672a9868e2411ad8027699a3be22c2850a492e17048515f0842a7a52d1abbaed81d6a0a5f0c69d6acef1e450d371970abf2a633c32107b64f9846d8d4afa4dafa1e93495171ad8987f3913848559995836d82a67fa0ef6692e29a2a38495e9b100685caec480c047adcbdb7e9211f986fac6546676e2613fe435e98dc6e7f87fee375ce50c20045040b66f9470aabf677072f79314834d6cda13199819b8b489373600c124d763112cd875973a3973f593c1dbc5e07bef65fca60be35df7640d6c588414f446d4a62254dff25d2e3add67716d3677d709fc5eee90765a7ae0ddb558d09b3e2a5285bb933dd8d4837ae143c80f3dfd7ba32d20fea072a7abd4e323d08d95b767b5d9ccaf03af5386127543965af092569a36fe4c84c85b6664722a66edcd9a69cc40a93239e34d61cb201dc6950d5e3c6cf609c82630dc16988a88662c769533f8e647721dc829418e412b337216fca1b6a8a0c86d1a22eefddd22fdb56b281772704395ded18ffe66695c16daa40d9fc8e7aaa2c2e745e59040fe1a6864b7e5fe4dc0622a8b9e800e226bd38a0461d4cdd3f925cc803aac90ad633935114e798c088e62b59359611643383df2c86389cb43735dad2f0254afed5ed8f416ae797fbbeeb80b0fbcb429e0c7b3c80118902c0a2e2a2c56d471973839d4f8aa937dffbc9b88975098205d173331566947af5cacf2afe97f206b0034e12af2ac384d748fa64f82d8781a40debc767e850766e80416f8dddd274486240ddd13977b630e8b50aa16549ec3741853cd5aa9a972759d1c6900fd1ce25d77e175e5abe06cc878bc216926dbb9b612e491f7239ed68dbc6662d3f7ae5125f56bc39b5557167ab81e396b2b3de47408275014b9f13e08f69abee7af7d49ebe83ffcbbcb6aaa0a97d88ff29559ddf04f6a61579b74324af8d22def7486eb2fb00ba069a11e396c4d0d0ca952dad304c7858da0301f44e3ba3230053a28431316ac95ebb64924d0780f4fdb4041fcdaaab4b33f6bf810b863f1d845d2f6b53318182399d4211de16dc19dbf9d0093d807ab31680d2de1eadad0b421b1094ca9944d34f27b40aac08984684623b9936193f5bcefd32827b37136b133dfd0dd28ad36418b72cbdc0c0c003000ffffff7f0000000014006d00200100000000000000000000000000028097c3a13ff0b2e2278399e9775c9310d1af9cdae27127af8b54b0596c6a12267ec0c6688cc6b32eabf24c7805a302c792a1579e6e141eaf23bd7eb128d3a23510496a09aed50a1a07d7a11360ffbfcfacf26878b597d8ecce6d18916af0f519b6142c5be37eb66543d4e10c167b26cc41d8b126c43bf9c94792b52650100295388eac6f2c8739f855110c7a1bd2372125d13cd9c41c17f651f75e78c61b64e35204d79feca228faa9eff1da928d1ef94991413c41e042b786baea793c85477a121f8fe1d23ffd56040cee34e6329748786881c09e4ca7e3a22941c0f093fabdef60ff43a403f8e63a36854cbfada39b5bc38e25a7076e41faf51130b9902c95d55bc88cb04830a8e9e01bd9614081cba5cb329dea309c133f38f9350c2b128e595160f72e157458c6524948396b05e5d4469f5d2f91ba7d9c231bf8a18b06b9ab6cc8bdc821995b9b1a29d1be186dc04b7e9381eb87d0505d35c9259b8963044c0aadbb76c35c2a7ff43ee8a36adb09981e7fd40e7cbd8d004681a763b0b5e0d877d8f4ea074f884fe537bf80de2377ec6ce852a4a360a9e50a0e6790ff1621a73b1cb78c299c05003a009e00000008003500", @ANYRES32, @ANYBLOB="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"], 0x14e8}, 0x1, 0x0, 0x0, 0x48810}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) unshare(0x48020200) fallocate(r0, 0x74, 0x9, 0x7) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xe4, 0xfe, 0x7f, 0x0, 0x0, 0xfffffffffffffff7, 0x40, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8e, 0x4, @perf_config_ext={0x5, 0x6}, 0x201, 0x3d, 0x0, 0x9a39b97c57c9fb5d, 0x6, 0x6, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}]}]}]}, 0x40}}, 0x0) r5 = socket(0xf, 0x80000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r5, 0x7ff, 0x100000000, 0x1, 0xff}) 20:16:36 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x42, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000068a1f7414d18b14900"/112], 0xb8}}, 0x0) socket$unix(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) pread64(r1, &(0x7f0000001100)=""/4095, 0xfff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000002100)="5f73e396d9a428c06a1bb9b6b9e673ff0237884aed4dba97b8f92c958c75cf0d7d082e55b7469ad8b5b7eaea7ba5ca1615a98d5c6fb87b87dc1c85a01c0e2b", 0x3f, 0x400) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8acc10bf535fece6", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 20:16:36 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x1010, r0, 0x8000000) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r4, 0x4, 0x0, 0xbe6c, 0x2}, 0x8) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x402000, 0x24) openat(r7, &(0x7f0000000200)='./file1\x00', 0xc0, 0x9) 20:16:36 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 20:16:36 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 20:16:36 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) 20:16:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:36 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:37 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20d315) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@ceph_nfs_fh={0x8, 0x1, {0x3}}, &(0x7f0000000140), 0x400) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) [ 1872.627962] FAULT_INJECTION: forcing a failure. [ 1872.627962] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.630644] CPU: 1 PID: 10387 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1872.632247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1872.634178] Call Trace: [ 1872.634799] dump_stack+0x107/0x167 [ 1872.635648] should_fail.cold+0x5/0xa [ 1872.636540] ? xas_alloc+0x336/0x440 [ 1872.637410] should_failslab+0x5/0x20 [ 1872.638289] kmem_cache_alloc+0x5b/0x310 [ 1872.639238] xas_alloc+0x336/0x440 [ 1872.640063] xas_create+0x34a/0x10d0 [ 1872.640959] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1872.642169] xas_store+0x8c/0x1c40 [ 1872.643014] __xa_store+0x164/0x2d0 [ 1872.643861] ? xa_delete_node+0x280/0x280 [ 1872.644857] ? trace_hardirqs_on+0x5b/0x180 [ 1872.645870] xa_store+0x31/0x50 [ 1872.646641] __io_uring_add_tctx_node+0x1cf/0x520 [ 1872.647750] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1872.648986] __do_sys_io_uring_enter+0x14de/0x1920 [ 1872.650128] ? lock_downgrade+0x6d0/0x6d0 [ 1872.651084] ? find_held_lock+0x2c/0x110 [ 1872.652028] ? io_submit_sqes+0x85c0/0x85c0 [ 1872.653047] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1872.654165] ? wait_for_completion_io+0x270/0x270 [ 1872.655271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1872.656353] ? vfs_write+0x354/0xa70 [ 1872.657331] ? fput_many+0x2f/0x1a0 [ 1872.658171] ? ksys_write+0x1a9/0x260 [ 1872.659040] ? __ia32_sys_read+0xb0/0xb0 [ 1872.659998] do_syscall_64+0x33/0x40 [ 1872.660886] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1872.662063] RIP: 0033:0x7f818218db19 [ 1872.662930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1872.667099] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1872.668828] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1872.670437] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1872.672063] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1872.673702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1872.675333] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1872.683158] FAULT_INJECTION: forcing a failure. [ 1872.683158] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.685608] CPU: 0 PID: 10393 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1872.686997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1872.688674] Call Trace: [ 1872.689216] dump_stack+0x107/0x167 [ 1872.689957] should_fail.cold+0x5/0xa [ 1872.690730] ? create_object.isra.0+0x3a/0xa20 [ 1872.691656] should_failslab+0x5/0x20 [ 1872.692442] kmem_cache_alloc+0x5b/0x310 [ 1872.693272] ? mark_held_locks+0x9e/0xe0 [ 1872.694099] create_object.isra.0+0x3a/0xa20 [ 1872.695005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1872.696041] kmem_cache_alloc+0x159/0x310 [ 1872.696936] xas_alloc+0x336/0x440 [ 1872.697662] xas_create+0x34a/0x10d0 [ 1872.698445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1872.699512] xas_store+0x8c/0x1c40 [ 1872.700255] __xa_store+0x164/0x2d0 [ 1872.701013] ? xa_delete_node+0x280/0x280 [ 1872.701873] ? trace_hardirqs_on+0x5b/0x180 [ 1872.702774] xa_store+0x31/0x50 [ 1872.703455] __io_uring_add_tctx_node+0x1cf/0x520 [ 1872.704441] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1872.705510] __do_sys_io_uring_enter+0x14de/0x1920 [ 1872.706587] ? lock_downgrade+0x6d0/0x6d0 [ 1872.707425] ? find_held_lock+0x2c/0x110 [ 1872.708247] ? io_submit_sqes+0x85c0/0x85c0 [ 1872.709132] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1872.710105] ? wait_for_completion_io+0x270/0x270 [ 1872.711077] ? rcu_read_lock_any_held+0x75/0xa0 [ 1872.712009] ? vfs_write+0x354/0xa70 [ 1872.712765] ? fput_many+0x2f/0x1a0 [ 1872.713500] ? ksys_write+0x1a9/0x260 [ 1872.714267] ? __ia32_sys_read+0xb0/0xb0 [ 1872.715102] do_syscall_64+0x33/0x40 [ 1872.715857] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1872.716901] RIP: 0033:0x7f27221a7b19 [ 1872.717653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1872.721348] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1872.723075] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1872.724522] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1872.725950] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 20:16:37 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x5c5241, 0x114) io_uring_enter(r0, 0x44d6, 0x3, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) r7 = openat(r6, &(0x7f0000000000)='./file1\x00', 0x1a3000, 0x0) copy_file_range(r7, 0x0, r3, 0x0, 0x5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) write$P9_RREADLINK(r4, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1872.727376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1872.728857] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 20:16:54 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) 20:16:54 executing program 1: unshare(0x480) unshare(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = getpid() unshare(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x40000000}) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x5bc) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x5, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x10910, 0x3, 0x6, 0x2, 0x854a, 0x5, 0x0, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, r3, 0x1) r4 = syz_open_dev$vcsn(&(0x7f0000000200), 0x100, 0x450b80) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000240)=0x1b) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x7, 0x3}, &(0x7f00000000c0)) r5 = getpgid(0x0) ptrace$setopts(0x4206, r5, 0x0, 0x200001) 20:16:54 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 20:16:54 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) syncfs(r6) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:16:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:16:54 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:16:54 executing program 6: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x90200, 0x0) r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x54, 0x1, 0x35, "67f1948720d3fd75d89bc85871f4ec9c", "7d077311bd3981cf034f8b2bc7f9ade43783d01454913664d9207bf72529c0798ac79628ef99e26eba5405612e57b8b32addcd04f614a81f5c484f50139021"}, 0x54, 0x3) syz_io_uring_setup(0x20, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x8000, 0x0, 0x0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0x3}, 0x10001) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) getresgid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, r5, r6}, 0xc) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='\x00', 0x80, 0x2000, 0x1}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000001c0)=0x68) 20:16:54 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1889.912264] FAULT_INJECTION: forcing a failure. [ 1889.912264] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.913029] FAULT_INJECTION: forcing a failure. [ 1889.913029] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.914660] CPU: 1 PID: 10426 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1889.918565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.920246] Call Trace: [ 1889.920795] dump_stack+0x107/0x167 [ 1889.921523] should_fail.cold+0x5/0xa [ 1889.922287] ? xas_alloc+0x336/0x440 [ 1889.923030] should_failslab+0x5/0x20 [ 1889.923786] kmem_cache_alloc+0x5b/0x310 [ 1889.924611] xas_alloc+0x336/0x440 [ 1889.925324] xas_create+0x34a/0x10d0 [ 1889.926097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.927137] xas_store+0x8c/0x1c40 [ 1889.927867] __xa_store+0x164/0x2d0 [ 1889.928597] ? xa_delete_node+0x280/0x280 [ 1889.929428] ? trace_hardirqs_on+0x5b/0x180 [ 1889.930303] xa_store+0x31/0x50 [ 1889.930961] __io_uring_add_tctx_node+0x1cf/0x520 [ 1889.931913] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1889.932986] __do_sys_io_uring_enter+0x14de/0x1920 [ 1889.933969] ? lock_downgrade+0x6d0/0x6d0 [ 1889.934789] ? find_held_lock+0x2c/0x110 [ 1889.935601] ? io_submit_sqes+0x85c0/0x85c0 [ 1889.936472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.937443] ? wait_for_completion_io+0x270/0x270 [ 1889.938402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.939321] ? vfs_write+0x354/0xa70 [ 1889.940063] ? fput_many+0x2f/0x1a0 [ 1889.940792] ? ksys_write+0x1a9/0x260 [ 1889.941546] ? __ia32_sys_read+0xb0/0xb0 [ 1889.942371] do_syscall_64+0x33/0x40 [ 1889.943111] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1889.944130] RIP: 0033:0x7f27221a7b19 [ 1889.944885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.948511] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.950032] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1889.951432] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1889.952846] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1889.954239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.955656] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1889.957116] CPU: 0 PID: 10427 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1889.958741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.960682] Call Trace: [ 1889.961305] dump_stack+0x107/0x167 [ 1889.962156] should_fail.cold+0x5/0xa [ 1889.963041] ? create_object.isra.0+0x3a/0xa20 [ 1889.964109] should_failslab+0x5/0x20 [ 1889.965001] kmem_cache_alloc+0x5b/0x310 [ 1889.965949] ? mark_held_locks+0x9e/0xe0 [ 1889.966899] create_object.isra.0+0x3a/0xa20 [ 1889.967924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1889.969118] kmem_cache_alloc+0x159/0x310 [ 1889.970089] xas_alloc+0x336/0x440 [ 1889.970946] xas_create+0x34a/0x10d0 [ 1889.971831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1889.973073] xas_store+0x8c/0x1c40 [ 1889.973924] __xa_store+0x164/0x2d0 [ 1889.974781] ? xa_delete_node+0x280/0x280 [ 1889.975756] ? trace_hardirqs_on+0x5b/0x180 [ 1889.976780] xa_store+0x31/0x50 [ 1889.977550] __io_uring_add_tctx_node+0x1cf/0x520 [ 1889.978676] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1889.979911] __do_sys_io_uring_enter+0x14de/0x1920 [ 1889.981060] ? lock_downgrade+0x6d0/0x6d0 [ 1889.982020] ? find_held_lock+0x2c/0x110 [ 1889.982965] ? io_submit_sqes+0x85c0/0x85c0 [ 1889.983977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1889.985116] ? wait_for_completion_io+0x270/0x270 [ 1889.986227] ? rcu_read_lock_any_held+0x75/0xa0 [ 1889.987293] ? vfs_write+0x354/0xa70 [ 1889.988160] ? fput_many+0x2f/0x1a0 [ 1889.989009] ? ksys_write+0x1a9/0x260 [ 1889.989889] ? __ia32_sys_read+0xb0/0xb0 [ 1889.990846] do_syscall_64+0x33/0x40 [ 1889.991709] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1889.992917] RIP: 0033:0x7f818218db19 [ 1889.993779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.998023] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1889.999771] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1890.001420] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1890.003053] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1890.004828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1890.006465] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:16:54 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) pwrite64(r0, &(0x7f0000000240)="69217e30d3786c44921947d1e110c56e39ddf9b5fb61ab03bd31d405b13effd1f550c89c92fa83e227b3295575b8aebd58ea85c85075c728371dbc34103fb65db4357a4be48b17f40c77897bc99b4cab752c426f1a9260ce14573cbea50e18043fb7c99513aeaf3e211158133a041f6f5fddeb5f38e21aded488fffe6c463f37ade2cf8242b3ebe1604c271a5875b26877d265a7bacd", 0x96, 0x5) r1 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) symlinkat(&(0x7f0000000100)='.\x00', r1, &(0x7f0000000140)='./file0\x00') fspick(r1, &(0x7f00000013c0)='./file0/../file0\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x3f, 0x5, 0x6, 0x0, 0x1, 0x8, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xf591, 0x5}, 0x8000, 0x80000001, 0xfffffffe, 0x0, 0x9, 0x24, 0x2, 0x0, 0x1f, 0x0, 0x3}, r2, 0xe, r0, 0x0) 20:17:09 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000, 0x0, 0x0, 0x0) 20:17:09 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:09 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 20:17:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x1d, 0x25, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x120, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x21, 0xa8, @random="6e91c21fb1d8a17fed8592be3a1c720163ead350e67b0c4373b7644dcc"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa2, 0xa8, @random="6103126d435c62ad776a96de3e77d599e57093032736634bc81afd11b08ff72b6fc4de26448c2c15fdd07cff3818420dedc18e78a6c9dbe22ea1558e5dc0f2263acf41c421d9b54b971cf27a7e230d07aaefc5dfd55d82fc4821baefc6d67d1e45520e646c3385418f506ffc6e3b74bdfea6cc88179573c7cbc1f48ed331c24c3b98d2217bdb42764af35823e2c679fb51664c32a769c926fccf129e987f"}, @handle=@pci={{0x8}, {0x11}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000010}, 0x4810) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) dup(r1) 20:17:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x140) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0xffffff81}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) lseek(r5, 0x80, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0xc5154000) lseek(r4, 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1905.034914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 20:17:09 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2400, 0x48) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x41) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) pwrite64(r6, &(0x7f0000000040)="d472f25a1f26e6d59d8d9f1cfdcd10310da9749f2dcec4c162fb9448de9276dc6408e50aff444bee6f7fee2eb8095fb6847c854e5e40d8800158", 0x3a, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00') ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000200)={0x9, 0x9, 0x7ff}) 20:17:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:09 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) [ 1905.137954] FAULT_INJECTION: forcing a failure. [ 1905.137954] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.141137] CPU: 0 PID: 10463 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1905.143007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.145172] Call Trace: [ 1905.145869] dump_stack+0x107/0x167 [ 1905.146829] should_fail.cold+0x5/0xa [ 1905.147830] ? create_object.isra.0+0x3a/0xa20 [ 1905.149053] should_failslab+0x5/0x20 [ 1905.149914] kmem_cache_alloc+0x5b/0x310 [ 1905.150757] ? mark_held_locks+0x9e/0xe0 [ 1905.151615] create_object.isra.0+0x3a/0xa20 [ 1905.152534] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1905.153603] kmem_cache_alloc+0x159/0x310 [ 1905.154476] xas_alloc+0x336/0x440 [ 1905.155223] xas_create+0x34a/0x10d0 [ 1905.156015] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1905.157130] xas_store+0x8c/0x1c40 [ 1905.157893] __xa_store+0x164/0x2d0 [ 1905.158651] ? xa_delete_node+0x280/0x280 [ 1905.159527] ? trace_hardirqs_on+0x5b/0x180 [ 1905.160436] xa_store+0x31/0x50 [ 1905.161155] __io_uring_add_tctx_node+0x1cf/0x520 [ 1905.162200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1905.163321] __do_sys_io_uring_enter+0x14de/0x1920 [ 1905.164361] ? lock_downgrade+0x6d0/0x6d0 [ 1905.165242] ? find_held_lock+0x2c/0x110 [ 1905.166100] ? io_submit_sqes+0x85c0/0x85c0 [ 1905.167008] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1905.168017] ? wait_for_completion_io+0x270/0x270 [ 1905.169022] ? rcu_read_lock_any_held+0x75/0xa0 [ 1905.169986] ? vfs_write+0x354/0xa70 [ 1905.170816] ? fput_many+0x2f/0x1a0 [ 1905.171584] ? ksys_write+0x1a9/0x260 [ 1905.172419] ? __ia32_sys_read+0xb0/0xb0 [ 1905.173312] do_syscall_64+0x33/0x40 [ 1905.174098] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1905.175194] RIP: 0033:0x7f27221a7b19 [ 1905.176015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.179948] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1905.181574] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1905.183100] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1905.184632] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.186174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.187734] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1905.193420] FAULT_INJECTION: forcing a failure. [ 1905.193420] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.196012] CPU: 0 PID: 10465 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1905.197520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1905.199306] Call Trace: [ 1905.199881] dump_stack+0x107/0x167 [ 1905.200677] should_fail.cold+0x5/0xa [ 1905.201615] ? xas_alloc+0x336/0x440 [ 1905.202427] should_failslab+0x5/0x20 [ 1905.203253] kmem_cache_alloc+0x5b/0x310 [ 1905.204143] xas_alloc+0x336/0x440 [ 1905.204943] xas_create+0x34a/0x10d0 [ 1905.205770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1905.206947] xas_store+0x8c/0x1c40 [ 1905.207724] __xa_store+0x164/0x2d0 [ 1905.208545] ? xa_delete_node+0x280/0x280 [ 1905.209460] ? trace_hardirqs_on+0x5b/0x180 [ 1905.210389] xa_store+0x31/0x50 [ 1905.211135] __io_uring_add_tctx_node+0x1cf/0x520 [ 1905.212198] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1905.213361] __do_sys_io_uring_enter+0x14de/0x1920 [ 1905.214460] ? lock_downgrade+0x6d0/0x6d0 [ 1905.215361] ? find_held_lock+0x2c/0x110 [ 1905.216249] ? io_submit_sqes+0x85c0/0x85c0 [ 1905.217218] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1905.218286] ? wait_for_completion_io+0x270/0x270 [ 1905.219329] ? rcu_read_lock_any_held+0x75/0xa0 [ 1905.220361] ? vfs_write+0x354/0xa70 [ 1905.221195] ? fput_many+0x2f/0x1a0 [ 1905.222008] ? ksys_write+0x1a9/0x260 [ 1905.222834] ? __ia32_sys_read+0xb0/0xb0 [ 1905.223750] do_syscall_64+0x33/0x40 [ 1905.224579] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1905.225730] RIP: 0033:0x7f818218db19 [ 1905.226556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1905.230567] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1905.232286] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1905.233890] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1905.235438] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.237053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1905.238585] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:17:09 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12021, 0x1, {0x2}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x80, 0x40, 0x9, 0x0, 0x1, 0x22, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x240, 0xfffffffffffffffe, 0xb4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x6, 0x0, 0x3cec}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) kcmp(0x0, r6, 0x1, r0, r4) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x20d315) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)={r8, r9+10000000}, 0x1, 0x0, 0x1, {0x0, r10}}, 0x410) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105942, 0x0) pipe(&(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {0x0}], 0x3, 0x6, 0xfffffffe) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x80) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xe0e00, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f00000002c0)=0x80) sendfile(r0, r3, 0x0, 0x100000001) [ 1905.721103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 20:17:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000001680)=[{0x0}, {&(0x7f00000001c0)=""/150, 0x96}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/192, 0xc0}, {&(0x7f00000014c0)=""/89, 0x59}, {&(0x7f0000001540)=""/59, 0x3b}], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x1e6) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x4, 0x0, 0x2b6, 0x6, 0x1, {0x0, r3}}, 0x0) 20:17:10 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:10 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) 20:17:10 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 20:17:10 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 20:17:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:10 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, "b38ed2c99acef3a9"}) [ 1906.138093] FAULT_INJECTION: forcing a failure. [ 1906.138093] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.140366] CPU: 0 PID: 10501 Comm: syz-executor.4 Not tainted 5.10.197 #1 [ 1906.142046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1906.142053] Call Trace: [ 1906.142081] dump_stack+0x107/0x167 [ 1906.142107] should_fail.cold+0x5/0xa [ 1906.142137] should_failslab+0x5/0x20 20:17:10 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1906.142157] kmem_cache_alloc_bulk+0x4b/0x320 [ 1906.142185] io_submit_sqes+0x6f76/0x85c0 [ 1906.142241] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1906.142258] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1906.142285] ? lock_downgrade+0x6d0/0x6d0 [ 1906.142301] ? find_held_lock+0x2c/0x110 20:17:10 executing program 2: r0 = syz_io_uring_setup(0x40000021, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x361, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) dup2(0xffffffffffffffff, r3) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1906.142327] ? io_submit_sqes+0x85c0/0x85c0 [ 1906.142356] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1906.142381] ? wait_for_completion_io+0x270/0x270 [ 1906.142405] ? rcu_read_lock_any_held+0x75/0xa0 [ 1906.142423] ? vfs_write+0x354/0xa70 [ 1906.142447] ? fput_many+0x2f/0x1a0 [ 1906.142467] ? ksys_write+0x1a9/0x260 [ 1906.142486] ? __ia32_sys_read+0xb0/0xb0 [ 1906.142522] do_syscall_64+0x33/0x40 [ 1906.142544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1906.142557] RIP: 0033:0x7f27221a7b19 [ 1906.142577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 20:17:10 executing program 1: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="8a02fb64b68e436f0000000000000000040002001400110300000000000000a09475f251cf43092f882ecee70cfb663f708a3c9a9131bdd9dd316f"], 0x28}}, 0x0) [ 1906.142588] RSP: 002b:00007f271f6fc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1906.142609] RAX: ffffffffffffffda RBX: 00007f27222bb020 RCX: 00007f27221a7b19 [ 1906.142620] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1906.142631] RBP: 00007f271f6fc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.142642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1906.142653] R13: 00007ffc2071657f R14: 00007f271f6fc300 R15: 0000000000022000 [ 1906.201760] FAULT_INJECTION: forcing a failure. [ 1906.201760] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.201782] CPU: 1 PID: 10505 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1906.201793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1906.201799] Call Trace: [ 1906.201827] dump_stack+0x107/0x167 20:17:10 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x3c1940768846c239}, 0xfffffff9) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x400, 0x20800) io_uring_enter(r3, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x10000}}, './file1\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x20d315) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0x8, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1906.201852] should_fail.cold+0x5/0xa [ 1906.201874] ? create_object.isra.0+0x3a/0xa20 [ 1906.201897] should_failslab+0x5/0x20 [ 1906.201915] kmem_cache_alloc+0x5b/0x310 [ 1906.201936] ? mark_held_locks+0x9e/0xe0 [ 1906.201959] create_object.isra.0+0x3a/0xa20 [ 1906.201978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1906.202004] kmem_cache_alloc+0x159/0x310 [ 1906.202030] xas_alloc+0x336/0x440 [ 1906.202053] xas_create+0x34a/0x10d0 [ 1906.202085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1906.202107] xas_store+0x8c/0x1c40 [ 1906.202143] __xa_store+0x164/0x2d0 [ 1906.202164] ? xa_delete_node+0x280/0x280 [ 1906.202192] ? trace_hardirqs_on+0x5b/0x180 [ 1906.202220] xa_store+0x31/0x50 [ 1906.202241] __io_uring_add_tctx_node+0x1cf/0x520 [ 1906.202260] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1906.202300] __do_sys_io_uring_enter+0x14de/0x1920 [ 1906.202324] ? lock_downgrade+0x6d0/0x6d0 [ 1906.202339] ? find_held_lock+0x2c/0x110 [ 1906.202364] ? io_submit_sqes+0x85c0/0x85c0 [ 1906.202394] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1906.202418] ? wait_for_completion_io+0x270/0x270 [ 1906.202443] ? rcu_read_lock_any_held+0x75/0xa0 [ 1906.202459] ? vfs_write+0x354/0xa70 [ 1906.202482] ? fput_many+0x2f/0x1a0 [ 1906.202501] ? ksys_write+0x1a9/0x260 [ 1906.202520] ? __ia32_sys_read+0xb0/0xb0 [ 1906.202555] do_syscall_64+0x33/0x40 [ 1906.202576] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1906.202588] RIP: 0033:0x7f818218db19 [ 1906.202607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1906.202617] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1906.202638] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1906.202648] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1906.202659] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1906.202669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1906.202679] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:17:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000200)='./file0\x00', 0x20) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r2, 0x6) syz_emit_ethernet(0x103, &(0x7f0000000400)=ANY=[@ANYBLOB="67856f93ef03aaaaaaaaaabb91002b008100330008050104099731f296efc77c2db7ea22fcdb65f7e81d54a63549f315e4b2dd0af59dea0d41a8bf855c71d77d33975eb4f9bdf14359d79585f8ac114aaae3530532089a16c847e3087d3f0fdb31d53450494d1e6f443b4871f3dfa4ee4e7bccced59fcd2ab006ec43a57c6789e9ba0dd6b91e603a241d6e545655a80b6ef54d1e1d100764a7652da7cdc5ffed2a89c08932b91b918634e2eaf954fc9c53d63e7dbf8b94e47c3f13463de034dab5a0f1344a3bade9ff3bd67214ffbea25380f762b680bf186ff20f7c6f766b60b265d03adc9a37b8b034a36ff77f67457722853d69f8d1a2e5287c5085d321a25a7ca42f821fd4e4"], &(0x7f0000000180)={0x0, 0x0, [0x7a7, 0xbe8, 0x0, 0x9a2]}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x4a060400) 20:17:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept4$unix(r0, &(0x7f00000011c0)=@abs, 0x0, 0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) fchmod(0xffffffffffffffff, 0x2) syz_io_uring_complete(0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="636c6f6e655f6368696c6472656e2c72656c656173655f6167656e743d2e2f66696c65312c6e616d653d2f6465762f7663736123002c72656c656173655f6167656e743d2e2f66696c65312c72656c656173655f6167656e743d2e2f66696c65312c6e616d653d2c6e616d653d2f6465762f7474795333002c6370757365745f76325f6d6f64652c66736d616769633d3078303030303030303030303030303030372c004e2c66be4f48741460"]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0x5, 0x7, 0x3, 0xb5], @subvolid=0xfffffffffffdffff}) lsetxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000001240), &(0x7f0000001280)=@v2={0x2000000, [{0x3, 0x2}, {0x2, 0x5}]}, 0x14, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000004700), 0xa8dc, 0x400) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000004780)={{r3}, 0x2, &(0x7f0000004740)=[0xd25, 0x3], 0xffffffffffff3b49, 0x2, [0xb91f, 0x2, 0x4, 0x9]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:17:10 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:11 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x3f, 0x4) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1906.952917] Process accounting resumed 20:17:11 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:11 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1907.055422] Process accounting resumed [ 1907.138424] FAULT_INJECTION: forcing a failure. [ 1907.138424] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.140433] CPU: 0 PID: 10539 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1907.141593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1907.142875] Call Trace: [ 1907.143295] dump_stack+0x107/0x167 [ 1907.143869] should_fail.cold+0x5/0xa [ 1907.144462] should_failslab+0x5/0x20 [ 1907.145065] kmem_cache_alloc_bulk+0x4b/0x320 [ 1907.145768] io_submit_sqes+0x6f76/0x85c0 [ 1907.146448] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1907.147228] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1907.148009] ? lock_downgrade+0x6d0/0x6d0 [ 1907.148688] ? find_held_lock+0x2c/0x110 [ 1907.149339] ? io_submit_sqes+0x85c0/0x85c0 [ 1907.150021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1907.150756] ? wait_for_completion_io+0x270/0x270 [ 1907.151498] ? rcu_read_lock_any_held+0x75/0xa0 [ 1907.152240] ? vfs_write+0x354/0xa70 [ 1907.152828] ? fput_many+0x2f/0x1a0 [ 1907.153387] ? ksys_write+0x1a9/0x260 [ 1907.153969] ? __ia32_sys_read+0xb0/0xb0 [ 1907.154627] do_syscall_64+0x33/0x40 [ 1907.155200] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1907.156012] RIP: 0033:0x7f818218db19 [ 1907.156604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1907.159417] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1907.160620] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1907.161725] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1907.162827] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1907.163923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1907.165020] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:17:28 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) 20:17:28 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 20:17:28 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x8) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r2, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x20d315) syz_io_uring_setup(0x5358, &(0x7f00000001c0)={0x0, 0xabdc, 0x10, 0x1, 0x22f, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x20d315) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x0, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:28 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 20:17:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x191042, 0x100) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat2(r5, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x446c920b4d5b838c, 0x20, 0x3}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000140)='./file0\x00', 0x100) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000036c0)=[{{&(0x7f00000003c0)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)="41eb98c18075c211996410ff4f2c4c226aa037bc9aee4bf4a183f9b4be98f55ceefe3539e9f9e30f10ef7f4bdde2cd7ccb6bd389611c0bfda115c9b41a77a6adc0c631d978ae50d85378b2c355a3807495a22c26", 0x54}, {&(0x7f00000004c0)="6729a51b7a5cecc56a42f4e12a983ec853d5a30b770b90af6af368076320ba1d77ff3c518c466a204b384ddae4eb1ad0edf3f70f0983369e8ad7a8727cb81e5cb92dba110b021a34afdc4f92f351554d078bc7f11b4315f0cf68be727ccd35598499b92760e9e2bf9ef06fc211ce22b6ec057e7941a70889cb49ad430654733de8f27828b6a007082b740cca74a317fd8132e68aefdf6209c3bfced4a1f970ed02a1c1a5d016c2383647ed9feeaf121937eced9c8f6f01e2aa10cbaecf", 0xbd}], 0x2, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1d}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0x6ca, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)="c7eef777e23ee50c3e965abd74e16266e37f2882a25770ff1af13496d5e08210b30f4739abfc735678e232dd7343e4921c57ef8cc8185d82a4693ad2cb0f9213ddbd744bf7c829974af2eda1aa602740b3a36aac7e8e7c6a4624a2dc1b7af639768f0298c96677265cfb25d7d8bd430719eaaa035948440a1edd1845c5d7d5529bd2b8416e54e5ba6f92436a9cb81aa5dfb8515f99542bc212ac", 0x9a}, {&(0x7f0000000740)="178c5762f5059d8761ae4a7b92829527f538990e32aed949f9715bd08734984ae6fed2531b76078f0159c6027ed5f6777123c75c5c0c8157ca", 0x39}, {&(0x7f0000000780)="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", 0x1000}], 0x3, &(0x7f00000017c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x82}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18}}], 0xa8}}, {{&(0x7f0000001880)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1c}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x60}}, {{&(0x7f00000019c0)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="5f642c4211bd9a581e6abcba97b179c1b7d9863d4ee541952c1b3e348dc15024e2dd1db838a0c8e54583a0b6789ddd92127540400f16ee6b0f19869293f5", 0x3e}, {&(0x7f0000001a80)="a1a1acda66c1726ad458b01b0a3cd987886c1613646a3b1a7954cf1fc1be70", 0x1f}], 0x2, &(0x7f0000001b00)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001b40)="1c92ce3bbc263894f24ed808ed308a22df3f6995cc3a6681406a5a5e69fe78fc347486ba0559df9e02b548f63c8afa0ecef695833c24f915c15dab6f58a34541fd136ba0e906367d36a2e959dc98d1b8b027d28003ea7230557dbd38cd1613f71c2d9e096c61f385ee5eb5991e6a577ddb779749f574ca6e2ff0142b7c0958ed78b6559c21652f06c4938ab68bd0a64c85f786ed82c1887d42a2e9e2a7f14a0b42", 0xa1}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="ff68b8b4499fec219a7be1fb341564413beaf0062ea3d747516dc1803160c9027ad2bc98fd639284ea0a7ae0708a7b42a8cd31571d038ab3d2796f39b1654f83ccc1b3414812f1c1adcfbdba8067b6c177e0ddc0c8ab08bf0115fb72a1078a18276abe8c6883d36898e8ca53275345a68a741cb6630794d80167a1cd024fe696f86d99193ea1a845f68772690f4500f1ba8c63", 0x93}], 0x3, &(0x7f0000002d00)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8c}}], 0x60}}, {{&(0x7f0000002d80)=@generic={0x1, "8b3fa9daa09a3f48dd26626aed7eb5edf6264259996da398544871f099a76406f0c0d57313a721024ea8f7ec868db58fcce4f6665070002d6f5cd36156439ffc8ca8cae6b0cf0127f926a1ce2131fde85b8e14d1d32a34b1ff1c2482a3d0c260cb0f6526c1d067733ac77a242019938ca29038104127e495faddb9fa172f"}, 0x80, &(0x7f0000002e00), 0x0, &(0x7f0000002e40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x48}}, {{&(0x7f0000002f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x1, {0xa, 0x4e20, 0x7f, @remote, 0xfffffffb}}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000002f80)="dccc4f0592ad6f45a263b866e705593f3178ec0e219a24cdd9c8afcf05fd38d616a1e16d", 0x24}, {&(0x7f0000002fc0)="96a33aa2da83b812ab56826e36a853b1e454e170d2418a6b68fdf1d4ac02c36518f11baa076173423effc616615fc361a6b5dbd2ec357722ce4096604edcfc159520dcc39c2ee9c04d7aa921", 0x4c}, {&(0x7f0000003040)="1866773f57e4d71143bbdf69fc278f94e05512a185941d4efca11ec97746ba1786deb319c6d6b16858bc986a048f93e883f932ca1d7c3642e38347ccafef56983ad934ccee636fd3737693dbfe1f671478579bcfa768f8623531496f44fd42479c68acb8e9444fde93a20cb6a9342890351f4126e0e05f4f0fc562b6a4bc9082143fb04fc9a6ad7d5b323995a941e8fd64fd3248759d03810740e653ac2dc65a597804a479b3d9880de35859e2ab9a891ef73671b179222d507e7da016fe23e8ede06ea4a244a786", 0xc8}, {&(0x7f0000003140)="4eef084fe6f55a2a4b68e23c51cf6b5ab77d388c65098cac53010fa1ce6742f5dfcccc065cc488ac3a18323173a1dd43c8c3d9c1b7c8a0d5c9b763376e329e74dd", 0x41}, {&(0x7f00000031c0)="0bb60e8db999f0517aa99804505995cef39bd115e715983b3e504a4a15b6fdd470a652c2a9801746b295c8186bcb5ad233e50fa1fdb0cd4c386addaae99ad02054809668499ec18ea4847292b75da1f02a75436700f6693860d56ff8c3936417d6d33ef8e5c92a6b33738d80c6b1c063dd32bcbb9c1751dacef45f1f8df934c064eb63a30dafc11bf57d37c8a148751a53769929b845a3bdd0893b9af38fc42657c0c0f3877325e6b19349b9d0e9757e27465bcd9df190fe6c4d5e5509da7b0ed8e56a30a5186e39893cd1e0cff5a45a5b588f", 0xd3}, {&(0x7f00000032c0)="6982c675ac38aabd10e5fcaaacf064b9e815fa0e99bbe2eeee662a299d515b091d2f6a4ab77e253548bf0e4e6bdb77a33a1b49198821e213bc6285f00af0fd8cdb7abce3a789d8fd5c59330c8cedc0ef760c7d7d4f11617715c136175c2e9595b58e6980d55e79baa756e7c905eb659adfb60d85e586cc3ff09939baf7d5bf2d76d3d25f63dc8fdfed35d17f87e5ec9413b734", 0x93}, {&(0x7f0000003380)="700a4e7b9db58758bfbb7a92c4f00cf7845545a9e7d66586d9194d94bd523c2bce7c4fccfb3d1f3092711e948f6b1112c6c0af8a92aa1169d1", 0x39}, {&(0x7f00000033c0)="f201d2abde", 0x5}, {&(0x7f0000003400)="c2bf6c79ddcbc30379549f", 0xb}], 0x9}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003500)="8782ae7e51e00d32af15fac66afd221795b9fa4cc5ec95bc76668a10dea1be588bd775a897ea8a065cffe5d7836b3f74af516918927023dd66f39e8e88778522600f02d52b4b", 0x46}], 0x1}}, {{&(0x7f00000035c0)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003640)="425ad711ea63a357df1a5558dfc82c4a283e5f07108ac262c0b8dfeed0904574bf722f", 0x23}], 0x1}}], 0x9, 0x8000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) getsockname(r6, &(0x7f0000000340)=@ieee802154={0x24, @short}, &(0x7f0000000300)=0xfffffffffffffea7) fallocate(r1, 0x20, 0x0, 0x2) 20:17:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20d315) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0) openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='freezer,\f']) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e80100003b00100025bd7000ffdbdf251b00000021017f80dccd32ac50b3ef0decd101596c2b7affe5d8b4aab9550bebd8b69c7e9591ff5680b9ff4b04cfc7dae09b636713dafa2fc3a046f1489eaedb193b407393ebd7fe125b8c7ce2bd2276ee1ed0c4f6dd5dde8dff444b93e955acc94fc33109abecdc8895a5a6ce143ffb3ab5ad464de67c10a9d0c27682839e7871bd33b3301406721c65c0b4b5acab9950b6cc7f36376d34c88618d776ebead551d72639eaed0791a11015093c509ccf18acbaf11eb9a8165571352991b828cfdb2c78d027c7abe363f6b20896ac922119c0d93ea57800b7c0394537858f25ef68283e0c4bb83095398d59426086a34f708faf08000900594fb7962b0a4c00083bd17974861b8ebbbdc4e4a312ca9ff9e23b7b990c09c71616b95a4b169749d3cf2429047a675491a78797c9d0cdf239308d6fcca07803c8160e9db5e3947f06a50237236bf96d31bf46084ad8231fd2be85f3061330e75749dfb456424d7a72f72ff0fb1d8fc058d46bdabb8f4226933eb783c95443188702240cf9268bd4856fbef9eb88f69919d86ffb5bbe65de305593", @ANYRES32, @ANYBLOB='\b\x00;\x00', @ANYRES32, @ANYBLOB="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"], 0x1e8}}, 0x4008040) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) [ 1923.939189] FAULT_INJECTION: forcing a failure. [ 1923.939189] name failslab, interval 1, probability 0, space 0, times 0 [ 1923.941762] CPU: 0 PID: 10562 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1923.943212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1923.944954] Call Trace: [ 1923.945523] dump_stack+0x107/0x167 [ 1923.946280] should_fail.cold+0x5/0xa [ 1923.947071] ? create_object.isra.0+0x3a/0xa20 [ 1923.948025] should_failslab+0x5/0x20 [ 1923.948821] kmem_cache_alloc+0x5b/0x310 [ 1923.949697] create_object.isra.0+0x3a/0xa20 [ 1923.950605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1923.951649] kmem_cache_alloc_bulk+0x168/0x320 [ 1923.952602] io_submit_sqes+0x6f76/0x85c0 [ 1923.953516] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1923.954543] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1923.955554] ? lock_downgrade+0x6d0/0x6d0 [ 1923.956402] ? find_held_lock+0x2c/0x110 [ 1923.957274] ? io_submit_sqes+0x85c0/0x85c0 [ 1923.958161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1923.959153] ? wait_for_completion_io+0x270/0x270 [ 1923.960145] ? rcu_read_lock_any_held+0x75/0xa0 [ 1923.961101] ? vfs_write+0x354/0xa70 [ 1923.961868] ? fput_many+0x2f/0x1a0 [ 1923.962597] ? ksys_write+0x1a9/0x260 [ 1923.963381] ? __ia32_sys_read+0xb0/0xb0 [ 1923.964194] do_syscall_64+0x33/0x40 [ 1923.964927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1923.965919] RIP: 0033:0x7f818218db19 [ 1923.966665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1923.970401] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1923.971961] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1923.973421] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1923.974876] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1923.976317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1923.977782] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 1924.029016] cgroup: Unknown subsys name ' ' 20:17:28 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1924.135529] cgroup: Unknown subsys name ' ' 20:17:28 executing program 6: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000008c0018007f00070000000000001df5d168c22dcb0216b63e69a4f744a988d854cf759c26a4763075ef5c"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000001740)=ANY=[@ANYBLOB="6c0000007a8c0381e6147fe05fa6394869a359b1dedf873f0eac123d7c63e6f1e00ce5820f3a2bf44456f5c8322be393de65fb5d9e", @ANYRES16=0x0, @ANYBLOB="000226bd7000000000000600000004000180080003000700000008000300020000000c00018008000300ac1414aa1400018008000700", @ANYRES32=r0, @ANYBLOB="05000200070000002400018008000300ffffffff060005004e220000060005004e230000060005004e210000"], 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x240040c0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xe4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x374}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa0}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48854}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)) signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 20:17:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x0, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x264b}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{0x0, 0x81, 0x2, 0x8001, 0x7fff, 0x1, 0x0, 0x4, 0x8d0, 0x4e6c, 0xfffffffa, 0x0, 0x3, 0x329, 0xae}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000003c0)={{r2, 0x800, 0x3, 0xfff, 0x0, 0xfffffffffffffe01, 0x1, 0x4e5, 0x1, 0x20, 0x5, 0x1, 0x2, 0x365e, 0x9}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r3, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000200)={{0x3, 0x2}, {0x81, 0x20}, 0x8, 0x2}) r6 = openat(r4, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01190002000019000000007700", @ANYRES32=r6, @ANYBLOB]) r8 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x9101) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0x20002001}) sendfile(r3, r6, 0x0, 0x100000001) 20:17:28 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg$unix(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/135, 0x87}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/141, 0x8d}, {&(0x7f0000001540)=""/156, 0x9c}], 0x5, &(0x7f0000001680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x1, 0x2, &(0x7f00000017c0)={0x77359400}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2956ffb85cf52077f4c09f06edfbf22f07730d8d6022c278d0977c2df27788ef7786337a66686fe9bfc25c59f9da34c91a668ce5300c31802fec87067b1d9ffd612125f3a599edb62fa963f4208a8df00b852420737f77707d466b12368ee3871022499ff581fd46d513d0e2f86cee886bba368bb68bb6acc8417afff2a31185882441d19656773c6a04f8fa9fddb2bff6837c58efe44046d9736dc140cb0bee0effd0193d39898df3ed13210323115171f6329ecf5d4fdf42329cdb545bffbe6df24e9c1628ea2f661e81d17f6866d", 0xd0}], 0x1, &(0x7f00000001c0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts={{0x48, 0x29, 0x37, {0x2f, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x5, [0x1, 0x6]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xa}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0xd0}, 0x40) sendfile(r1, r0, 0x0, 0xf88c) 20:17:29 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:52 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 20:17:52 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 6: socket$netlink(0x10, 0x3, 0x0) 20:17:52 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r3, r0, r4, 0xffffffffffffffff, r0], 0x5) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20d315) r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x6722, 0x20) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) dup3(r0, r5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESDEC=r6, @ANYBLOB="c96f19de8c5d090026620d0e02f6010ca2ecf8c44efb47a796d74f9d53502a56d410c7492a47e039fa8aaf04d1de88c2529cd64bce7706b565449daaa5d23d207e471fbadde1435500d083c6edad3927d1775624a43e07689f7bbd821174b429d5342d41e33fc112d74c3e76418207600000acff4c925cb0226b60342c78ed0b70d0d4f855df68bdbbf88d84e7fb402597ac51c6a38eb00d27488eb840e01e0918c5ffcd9033d31b4c9be2f636be2eb3c75bfa11f58d83003a61369e0000000000e5db78c606000001008a08f0db430b1ea94d5518f5e6e3786f427246c006052ea0a70ee7dea7", @ANYRESHEX=r3, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x3, 0x3, 0x8000008000) 20:17:52 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) 20:17:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x0, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:17:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2429}, &(0x7f0000000000/0x12000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)) [ 1948.151829] FAULT_INJECTION: forcing a failure. [ 1948.151829] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.154408] CPU: 1 PID: 10630 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1948.155783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1948.157448] Call Trace: [ 1948.157989] dump_stack+0x107/0x167 [ 1948.158727] should_fail.cold+0x5/0xa [ 1948.159496] ? create_object.isra.0+0x3a/0xa20 [ 1948.160411] should_failslab+0x5/0x20 [ 1948.161176] kmem_cache_alloc+0x5b/0x310 [ 1948.162020] ? mark_held_locks+0x9e/0xe0 [ 1948.162842] create_object.isra.0+0x3a/0xa20 [ 1948.163800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1948.164900] kmem_cache_alloc_bulk+0x168/0x320 [ 1948.165833] io_submit_sqes+0x6f76/0x85c0 [ 1948.166710] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1948.167842] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1948.168815] ? lock_downgrade+0x6d0/0x6d0 [ 1948.169671] ? find_held_lock+0x2c/0x110 [ 1948.170588] ? io_submit_sqes+0x85c0/0x85c0 [ 1948.171465] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1948.172430] ? wait_for_completion_io+0x270/0x270 [ 1948.173413] ? rcu_read_lock_any_held+0x75/0xa0 [ 1948.174343] ? vfs_write+0x354/0xa70 [ 1948.175093] ? fput_many+0x2f/0x1a0 [ 1948.175822] ? ksys_write+0x1a9/0x260 [ 1948.176582] ? __ia32_sys_read+0xb0/0xb0 [ 1948.177420] do_syscall_64+0x33/0x40 [ 1948.178168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1948.179189] RIP: 0033:0x7f818218db19 [ 1948.179933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1948.183622] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1948.185138] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1948.186581] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1948.188011] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1948.189467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1948.190898] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:17:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) r6 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000240)=0x80) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/tty', 0x400080, 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000200)={0x10000, 0x100}, 0xc) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000040)=0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0xfffffffd) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:17:52 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000000)={@local, r5}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002800)={0x564, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d70}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72b}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xccaf}}, {0x8}}}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x801) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000000)={@local, r11}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002800)={0x564, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d70}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72b}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xccaf}}, {0x8}}}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000140)="563086922fa5a41452803c02429632237b859492dfbf75d008ef4913554d31b129c70b0da72258cfc2d4e831ecd7676ae7a6a087f965584b01273bc8d20b88eb2e757986dcce1e2177cfab554f47ea6e0932483ef2026734a060d4a14da28f04be12e460e27cc933f51c9e68370363083459cc94c083978f3fd551a1effcffe936e51ea9d37f8b17605652e48c7a8c506db29e2e02e8e29372a6813479788bc104917d2040", 0xa5}, {&(0x7f00000012c0)="5b53ce904c16b8c5382093ff9c20b6f1c49e37e70e9b8e11738a437fa5b286c5a8483b30045c6542faa1fdf9a7bf5d96a193b05b78551703ba1e5095149c24ce4fa866ec3106c4bdb603851c36b62b11475c1df9e87172fed732339acbb1a69d692287d9ede202ece7d9f97e5528", 0x6e}, {&(0x7f0000001340)="7d72436a88aa7d5488d68adfcde0ebd770b8dd2754a67c8ef149babfe1ef74ed5acd1af114ff34390208aff790e8759058b3d951c2a7e8ee3c3a0f739020b0924cf3a5dd21ddf6e6e5012e27400b8f3dfb52874dbc2b6660f208310b255e90d6c3aec98bcd9be4e7e1d7bc92ca7d554833639c034d630c137109637942fd0227c312291d68fed597d634d6cdb31fd926124ffdaf4ca4d2004a9e3a27b71f458af53310293c33361518fb743e83b3f41770c3f35b", 0xb4}], 0x4, &(0x7f0000001400)=[@ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x2f, 0x2, [{0x6, 0xd, "5db4d5fb6931e698481e77"}, {0x1, 0x12, "0129e7d368035956137de55e92517bde"}, {0x5, 0x3, 'U'}, {0x5, 0x7, "cf45b23d15"}]}, @cipso={0x86, 0x12, 0x1, [{0x5, 0x6, "46412781"}, {0x1, 0x6, "bd5c7e26"}]}, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0x6, [{@rand_addr=0x64010102, 0x4}, {@local, 0xff}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@remote}]}, @generic={0x7, 0x5, "7a78e1"}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @broadcast}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @end, @generic={0x93, 0x5, "f3285d"}, @lsrr={0x83, 0xb, 0xb6, [@loopback, @remote]}, @end, @noop, @lsrr={0x83, 0x7, 0xbc, [@rand_addr=0x64010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0xc, 0xbd, 0x3, 0x3, [{@rand_addr=0x4, 0x300}]}, @generic={0x88, 0xf, "f30509ec65680b3c809715a728"}, @generic={0x88, 0x6, "e6c3e649"}, @ra={0x94, 0x4, 0x1}]}}}], 0x148}}, {{&(0x7f0000000240)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001580)="ab0defdcfc51c9895abfe2a4ce98e50263d3e463309217323bb5a2fb6c5cbf475863e6e5d61357d9ca01baf4831217b4676fe2f9456622e5adfbe86e2ae2be138af24a1df9f4577ee133b2f5c3105d04fb422a40ff17be5b", 0x58}, {&(0x7f0000001600)="efcaa7f3077b5a8fc138f77a4cc3755da43c3ce4ef440184f36246c031dba58013b93213a3460da1854e26e85f9841c3795a8b13bf25bb3368d651b4cb7c57c4e36a4b406c03cc39a747fd4b5532d843ed69bc7c9f61470706a3cbdd0bc9e266b77a7ad4c6a50fb9bc2b2db7d23c20ee2259967cc632a57e09880463", 0x7c}], 0x2, &(0x7f00000016c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3257cc93}}], 0x30}}, {{&(0x7f0000001700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001740)="0be645fbee8c81c64262346b1cd18122ceb939acb672d12ac4532f6a9ef45a62a49a8526ee5a1cd94b3d3a0593da9eca19648c7d6fc33d9b5f59cc0a0aeafe55588ceee48c434738b31a19b1dae1333b3367d9239ab2b272b4a7f6d741e65a7f01e1e6c66b6026aa802652a8da22d35ed02caede8ad2d44e6e1fc261a9c50e27efdd567263d1c670b856e34b86093667868eadcd265b5da7012dc0732b6642f6622c31b95834", 0xa6}, {&(0x7f0000001800)="7ce5616a439c502a9814b6577c2fe518eb4f", 0x12}, {&(0x7f0000001840)="494e3ec046b1693b57a14aacdd380d1eade588d8d3c54ef157c3eb7f9c04d6f54b6002b1991d83fbc6334a7178a8127dfb7576763207ceda769827f091e47f064a92874ac3af010af723debff970d58a38f3292547152718bc813f699a39f35b57bf0409ad3eb5a3d7393501d3c680461ccacc2bab035a3d12029d31861350658e8e9e3cc6e986435b7cee4641bcfb3dadf384952af7dcc300abf50bc626a0b7de8404bcc299063f81", 0xa9}, {&(0x7f0000001900)="0bc9bba516ed96341d9c6866cc8269c87eb58ebff8e6b6a9f7af997e56e66522863143a30a754ad58a515ad1fca82ecce0d696a4022abf0470e1801b1e6e040628029d6b6559b5be84933647ff6e0119f83ff12c7c93cb765b8913fcb86bca072f5135370b8f0e6f9beb317df489b5edf2ebd9926dd3cde7711588c84ce2d6aaa457383fcb9c15cd2df0e167651273b67444e2bac5f8c1cba80a4bbc433314c751d9ec86aa156f9313a616b88471f7a564082a92b565", 0xb6}, {&(0x7f00000019c0)="6803497253fe059b3fb7fce45c23c2dc56cfe5239de2e6708817f699e8db2d467dc336c4c3926ca404cd8923472b83062f09060bb8d6434c9195a9e4b9d9ca9018835e8a420e2977e2f822d9ac3d3d68790bd769459e8621aabd1508bb871c5a0cf6", 0x62}, {&(0x7f0000001a40)="c0a4cd128f2c8a124b42276672d619b53f312d911c42f8", 0x17}, {&(0x7f0000001a80)="b91795a10aafc3477dbbb8c9df369299280b93338ed315fadd6ae9f7ea673b9c84eff45cf1809553c1d261c48b4dc07955e55ce84a268a8c", 0x38}, {&(0x7f0000001ac0)="445efb6d64e1febcf8edade0983879f410faf3627bb5", 0x16}], 0x8, &(0x7f0000001b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x1f, [@remote, @loopback, @broadcast]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xaa, 0x0, 0x3, [0x9, 0x5]}, @timestamp_prespec={0x44, 0xc, 0xa2, 0x3, 0x1, [{@local, 0x1eb0}]}, @end, @cipso={0x86, 0x9, 0x3, [{0x2, 0x3, "06"}]}, @timestamp_addr={0x44, 0x24, 0xf, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0x360f}, {@loopback, 0x80}, {@private=0xa010101, 0x9}]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x6, 0x5, "4dffbb"}, {0x6, 0x6, "f254322e"}, {0x3, 0xe, "f7b728ee64b2ceaf4911beac"}]}, @timestamp_prespec={0x44, 0x14, 0x1e, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x7fffffff}, {@multicast1, 0x5}]}, @end, @rr={0x7, 0x7, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xa3, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0xfe7}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @private=0xa010101}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x3a, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0xc6, [@remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, @local]}, @end, @rr={0x7, 0xf, 0x53, [@multicast1, @remote, @loopback]}, @lsrr={0x83, 0x1f, 0xfb, [@local, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101, @loopback, @broadcast]}, @timestamp={0x44, 0x24, 0xbb, 0x0, 0x2, [0x7f0, 0x1c, 0x0, 0x1, 0x4000, 0x7fff, 0xb8, 0x721dbbae]}, @timestamp_prespec={0x44, 0x3c, 0x69, 0x3, 0x8, [{@private=0xa010100, 0x7c0d01b1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x2}, {@multicast1, 0x5}, {@remote, 0x4}, {@empty, 0x9}, {@private=0xa010101, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x238}}], 0x3, 0x40008d0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000200)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000280)={[{@prjquota}, {@min_batch_time}]}) 20:17:52 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x4200, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1948.622836] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. 20:17:53 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1948.822146] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. 20:17:53 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x80, 0x40, 0x9, 0x0, 0x1, 0x22, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x240, 0xfffffffffffffffe, 0xb4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x6, 0x0, 0x3cec}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x13, 0x0, 0x3, 0x0, 0x0, 0x7b5, 0xc000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40008, 0xfffffffffffffffe, 0x1f, 0xbed5c6924f3eb2fa, 0x9, 0x4, 0xe61e, 0x0, 0x10001, 0x0, 0x898}, r1, 0xe, r0, 0xa) 20:17:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r3, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:17:53 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 1949.114792] FAULT_INJECTION: forcing a failure. [ 1949.114792] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.117229] CPU: 0 PID: 10696 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1949.118660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1949.120358] Call Trace: [ 1949.120911] dump_stack+0x107/0x167 [ 1949.121724] should_fail.cold+0x5/0xa [ 1949.122617] ? create_object.isra.0+0x3a/0xa20 [ 1949.123690] should_failslab+0x5/0x20 [ 1949.124581] kmem_cache_alloc+0x5b/0x310 [ 1949.125551] ? mark_held_locks+0x9e/0xe0 [ 1949.126498] create_object.isra.0+0x3a/0xa20 [ 1949.127521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1949.128698] kmem_cache_alloc_bulk+0x168/0x320 [ 1949.129770] io_submit_sqes+0x6f76/0x85c0 [ 1949.130799] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1949.132008] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1949.133172] ? lock_downgrade+0x6d0/0x6d0 [ 1949.134184] ? find_held_lock+0x2c/0x110 [ 1949.135169] ? io_submit_sqes+0x85c0/0x85c0 [ 1949.136215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1949.137384] ? wait_for_completion_io+0x270/0x270 [ 1949.138541] ? rcu_read_lock_any_held+0x75/0xa0 [ 1949.139654] ? vfs_write+0x354/0xa70 [ 1949.140555] ? fput_many+0x2f/0x1a0 [ 1949.141447] ? ksys_write+0x1a9/0x260 [ 1949.142359] ? __ia32_sys_read+0xb0/0xb0 [ 1949.143357] do_syscall_64+0x33/0x40 [ 1949.144255] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1949.145509] RIP: 0033:0x7f818218db19 [ 1949.146405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.150825] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1949.152653] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1949.154378] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1949.156089] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.157805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.159515] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:18:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:09 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2, 0x0, 0x0, 0x0) 20:18:09 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000000000)={@local, r10}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64050000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250300000008000100", @ANYRES32=r8, @ANYBLOB="7c00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400703d000008000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r11, @ANYBLOB="f80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004002b07000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="900002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400afcc00000800070000000000"], 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x801) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="000125bd7000fddbdf2501000000080003000200000048000180060001000a00000008000300e0000002060005004e200000060001000a000000140004000000000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="05000200030000000800030003000000080002000300000034000180050802000400000008000700", @ANYRES32=r10, @ANYBLOB="05000200090000000500020000000000060005004e2000000600010002000000"], 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r12, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:18:09 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 20:18:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r3, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:18:09 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) 20:18:09 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:09 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800006, 0x40010, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 1964.858489] FAULT_INJECTION: forcing a failure. 20:18:09 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_io_uring_setup(0x1e64, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) close(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x802106, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) [ 1964.858489] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.860660] CPU: 0 PID: 10721 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1964.861871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.863187] Call Trace: [ 1964.863606] dump_stack+0x107/0x167 [ 1964.864195] should_fail.cold+0x5/0xa [ 1964.864803] ? create_object.isra.0+0x3a/0xa20 [ 1964.865533] should_failslab+0x5/0x20 [ 1964.866148] kmem_cache_alloc+0x5b/0x310 [ 1964.866796] ? mark_held_locks+0x9e/0xe0 [ 1964.867434] create_object.isra.0+0x3a/0xa20 [ 1964.868124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1964.869002] kmem_cache_alloc_bulk+0x168/0x320 [ 1964.869772] io_submit_sqes+0x6f76/0x85c0 [ 1964.870503] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1964.871339] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1964.872157] ? lock_downgrade+0x6d0/0x6d0 [ 1964.872867] ? find_held_lock+0x2c/0x110 [ 1964.873575] ? io_submit_sqes+0x85c0/0x85c0 [ 1964.874319] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1964.875151] ? wait_for_completion_io+0x270/0x270 [ 1964.875931] ? rcu_read_lock_any_held+0x75/0xa0 [ 1964.876722] ? vfs_write+0x354/0xa70 [ 1964.877352] ? fput_many+0x2f/0x1a0 [ 1964.877961] ? ksys_write+0x1a9/0x260 [ 1964.878608] ? __ia32_sys_read+0xb0/0xb0 [ 1964.879331] do_syscall_64+0x33/0x40 [ 1964.879962] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1964.880847] RIP: 0033:0x7f818218db19 [ 1964.881474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1964.884623] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1964.885958] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1964.887113] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1964.888328] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.889542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1964.890732] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:18:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r3, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:18:09 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r3, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:18:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f28004500007800000000001190780000edfffeffffff00004e20006490780206000000000000000000006bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3843a5007d60fa6d1c0779e6cb3d5656f39594619e6946ecbd671680e02dce79b473ee4cea9e52a8c1613f41ebf64e747375bc12"], 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 20:18:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:18:09 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:18:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x4, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r2, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000200), 0x1040, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) sendfile(r5, r7, 0x0, 0x20d315) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:18:26 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socketpair(0x1f, 0x6, 0x5, &(0x7f0000000080)) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:18:26 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 20:18:26 executing program 6: r0 = getpgid(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) write$cgroup_pid(r1, &(0x7f0000001780)=r0, 0x12) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/ipc\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000003c0)=0x28) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/65, 0x41) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {0x0}, {&(0x7f00000002c0)=""/147, 0x93}], 0x3, 0xfffffffe, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="001700002e2f66696c653000"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:18:26 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) 20:18:26 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) [ 1981.898831] FAULT_INJECTION: forcing a failure. [ 1981.898831] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.901248] CPU: 1 PID: 10783 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1981.902789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.904511] Call Trace: [ 1981.905093] dump_stack+0x107/0x167 [ 1981.905867] should_fail.cold+0x5/0xa [ 1981.906718] ? create_object.isra.0+0x3a/0xa20 [ 1981.907669] should_failslab+0x5/0x20 [ 1981.908529] kmem_cache_alloc+0x5b/0x310 [ 1981.909395] ? mark_held_locks+0x9e/0xe0 [ 1981.910310] create_object.isra.0+0x3a/0xa20 [ 1981.911317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1981.912423] kmem_cache_alloc_bulk+0x168/0x320 [ 1981.913354] io_submit_sqes+0x6f76/0x85c0 [ 1981.914258] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1981.915302] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1981.916356] ? lock_downgrade+0x6d0/0x6d0 [ 1981.917250] ? find_held_lock+0x2c/0x110 [ 1981.918191] ? io_submit_sqes+0x85c0/0x85c0 [ 1981.919117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1981.920118] ? wait_for_completion_io+0x270/0x270 [ 1981.921090] ? rcu_read_lock_any_held+0x75/0xa0 [ 1981.922119] ? vfs_write+0x354/0xa70 [ 1981.922956] ? fput_many+0x2f/0x1a0 [ 1981.923725] ? ksys_write+0x1a9/0x260 [ 1981.924588] ? __ia32_sys_read+0xb0/0xb0 [ 1981.925438] do_syscall_64+0x33/0x40 [ 1981.926202] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1981.927312] RIP: 0033:0x7f818218db19 [ 1981.928061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.932030] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1981.933708] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1981.935290] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1981.936817] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.938329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1981.939889] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:18:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:18:26 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:43 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) 20:18:43 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 20:18:43 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x6a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:18:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:18:43 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x5, 0x4, 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010000000000000000000000000005000000000000000c000080080010", @ANYRES32=r1, @ANYBLOB="5dc07f58a3256c4d5f3dd27206f04fe9295d791481adc131040127d140d0e99c9353d6f4044c4f9ed3f18bfe7dc5bab1eb8b71f8845681cda47f106f612bf95996681ee509008d38775905f2f2ac599c42eaf951bbb06302663b6ba2fdef0e3fdd78be061c65b9a2a5f1ab4e3d7acee0f0c546c885cf76a3d05522f43b1db09bae2403038039ca9a453c21d171dd7ebb6661ae6042bd6c9bd410c636832f7278accf6d1d50678c7779b1376500e9b018c81882cbb3dc7ffb6cc642d54d1e555c42686356cfbe0dd390a76f41cdff63eb7ee121700334"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x4, 0x85, 0x52, 0x0, 0x24, @empty, @mcast2, 0x0, 0x80, 0x402, 0xa273}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0x7}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x18}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r6, 0x0, 0x0) 20:18:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:18:43 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) 20:18:43 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1999.289213] FAULT_INJECTION: forcing a failure. [ 1999.289213] name failslab, interval 1, probability 0, space 0, times 0 [ 1999.291786] CPU: 0 PID: 10820 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 1999.293217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1999.294969] Call Trace: [ 1999.295525] dump_stack+0x107/0x167 [ 1999.296291] should_fail.cold+0x5/0xa [ 1999.297085] ? create_object.isra.0+0x3a/0xa20 [ 1999.298058] should_failslab+0x5/0x20 [ 1999.298852] kmem_cache_alloc+0x5b/0x310 [ 1999.299705] ? mark_held_locks+0x9e/0xe0 [ 1999.300556] create_object.isra.0+0x3a/0xa20 [ 1999.301475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1999.302565] kmem_cache_alloc_bulk+0x168/0x320 [ 1999.303527] io_submit_sqes+0x6f76/0x85c0 [ 1999.304431] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1999.305470] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1999.306509] ? lock_downgrade+0x6d0/0x6d0 [ 1999.307372] ? find_held_lock+0x2c/0x110 [ 1999.308223] ? io_submit_sqes+0x85c0/0x85c0 [ 1999.309133] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1999.310171] ? wait_for_completion_io+0x270/0x270 [ 1999.311190] ? rcu_read_lock_any_held+0x75/0xa0 [ 1999.312147] ? vfs_write+0x354/0xa70 [ 1999.312937] ? fput_many+0x2f/0x1a0 [ 1999.313689] ? ksys_write+0x1a9/0x260 [ 1999.314511] ? __ia32_sys_read+0xb0/0xb0 [ 1999.315368] do_syscall_64+0x33/0x40 [ 1999.316142] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1999.317201] RIP: 0033:0x7f818218db19 [ 1999.318008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1999.321875] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1999.323500] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 1999.325007] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1999.326536] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1999.328026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1999.329514] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:18:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:18:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:18:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xa1, 0x0) 20:18:43 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:18:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1de}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000080)=0x401, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 20:18:43 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xa1, 0x0) [ 1999.651520] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 20:18:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0xa1, 0x0) 20:18:44 executing program 6: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) r4 = clone3(&(0x7f0000000380)={0x100, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x3b}, &(0x7f0000000200)=""/21, 0x15, &(0x7f0000000280)=""/131, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9, {r0}}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={r2, 0x0, 0x3, 0x1}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x81, 0x3, 0x5, 0x0, 0x8, 0xc0082, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040)}, 0x4010, 0x1, 0x17c, 0x9, 0x1b, 0x4, 0x1, 0x0, 0x4}, r4, 0x1, r5, 0x9) 20:19:01 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) 20:19:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:19:01 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x30d7, &(0x7f0000000300)={0x0, 0x5e3c, 0x8, 0x1, 0x1c5, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000380)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x106) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r5}}, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xe6a02, 0x0) 20:19:01 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 20:19:01 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4200, 0x0, 0x0, 0x0) 20:19:01 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) getpgid(r0) getpid() mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB, @ANYBLOB="2c6d73697a653d3078083030303030303030537816ba6e09eb"]) [ 2016.864601] 9pnet: Could not find request transport: fd0xffffffffffffffff 20:19:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:19:01 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/warn_count', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2016.913839] FAULT_INJECTION: forcing a failure. [ 2016.913839] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.916499] CPU: 1 PID: 10879 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 2016.917894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2016.919547] Call Trace: [ 2016.920085] dump_stack+0x107/0x167 [ 2016.920820] should_fail.cold+0x5/0xa [ 2016.921608] ? create_object.isra.0+0x3a/0xa20 [ 2016.922555] should_failslab+0x5/0x20 [ 2016.923330] kmem_cache_alloc+0x5b/0x310 [ 2016.924151] ? mark_held_locks+0x9e/0xe0 [ 2016.924986] create_object.isra.0+0x3a/0xa20 [ 2016.925870] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2016.926908] kmem_cache_alloc_bulk+0x168/0x320 [ 2016.927844] io_submit_sqes+0x6f76/0x85c0 [ 2016.928717] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2016.929705] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2016.930700] ? lock_downgrade+0x6d0/0x6d0 [ 2016.931527] ? find_held_lock+0x2c/0x110 [ 2016.932359] ? io_submit_sqes+0x85c0/0x85c0 [ 2016.933230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2016.934221] ? wait_for_completion_io+0x270/0x270 [ 2016.935185] ? rcu_read_lock_any_held+0x75/0xa0 [ 2016.936134] ? vfs_write+0x354/0xa70 [ 2016.936892] ? fput_many+0x2f/0x1a0 [ 2016.937633] ? ksys_write+0x1a9/0x260 [ 2016.938417] ? __ia32_sys_read+0xb0/0xb0 [ 2016.939252] do_syscall_64+0x33/0x40 [ 2016.940014] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2016.941053] RIP: 0033:0x7f818218db19 [ 2016.941812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2016.945489] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2016.947039] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 2016.948473] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 2016.949906] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.951350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2016.952787] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:19:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, r0, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:19:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x22abc0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x2) sendfile(r0, r1, 0x0, 0x100000001) ftruncate(r0, 0x48) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) fstatfs(r3, &(0x7f00000001c0)=""/118) 20:19:02 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x40000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:02 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) 20:19:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:02 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:19:02 executing program 6: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/67) r1 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001340), 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001e00)={0x1, 0x400, @start={0x0, 0x0, "51854425c0b7f997bd23c5889c76e355f34f43bfb244a71381d52c258208ed4d1bbc83d77009c389af7c3ea1db0bbca31337178c396ab65f9894fec9c0ded24274e4b6b039fe3846a18fc0fd2fd21a2e4020b6ff045e3283cca1c352f1c9dc7694d2f3ea3d11f6c568a5d23729201dfa53665a505c4807e168ec549eadacb85e3b7dff6b7ce45d5c4cd11435122c4ff83cdade3f29114206891c606422aff9f77bf7f0d95ba533801e76420892e85f474410042308df019087a63a6ce7d0cb8731b0c5840e520d1d2ccc1e7c9ba7637aa8edd900f039322e6e6f615909401e95b47c317cb47cb4452f4753a056e6a68cbf8f75f9366311996387ef168b308dccebcde90fd38605b586aed98b16e060506b0e78490285f8bc8f5a39c551fda3a7eaf50bb04723e6efd04af2a6c4d33a53a53d67806f08463531aa3a4213d3773b7dd699e343b39b1b69d6d4be40218ef016e2e18aa9f5b6108801715bd71d98c2234cfda6530ae14ba726f766725b6933490eba9b49b44b31362513181371af9a140d9bfdeeab8f6ec81cce20d69b2d68140d38901957ccc40a95d2774cf661489ff55cfc42656a37e4da381bea777231865c8f8ab92fbbe180d8f87bf192c3c26884fd3084ca5d96f79fea7b27e7e2afeb9274475d0742bc798f51ff4542fdff0cc9074a73ab1050663be085dcaa753ea13a88ad35b479c3bdbb875cd8d88a454028ffefe1f8524b76384b3dec40f3feba2215905cd8f3f51a20766878a5235658ade550ca3a15a2ba085835fe977e3158a8bf41a0af018d46f0dcdfcb7ffa14aa318b071a16d0252537d24e03230b2d71933ebb44d8dc0d5a8e9ffdc6d120df765b07a142a38d74334e8a0ed1ba728c12670bafebfb1d6321d34b7a6f5fa984efcde62ba50d3efbae74c7ef24cf15c2d12c9ad468a50a2702c6e58ffea8dea14dcabe718e529d6d53cb93014a6724a16855f4615a74e936d9a72c2ae4c7ee06037a46cd9caff523865210219b0f8c1629c2d559788babc5824c3e9828df461e2ceafdf12bbb648e8e8ec5642c943a39daeb09315cb5b29a6dc79f0335d5a1f1369213e3526935983a00c41a45371fcf55444c07cee388daf1b0a4320eb7c725ae80a723e26af61fc2389c1210db20cc4331aed589fc6883121b6262751d2d32ae892573bd54f431d59a9133c5710bb9a4202ac26b2baf34ad144e5d7f90eff6fa5ba21241498e63bc331ab6dd27218cedeea409263a601cce6d13dc0b74625c811e1753d2d1eaeeae13790f4daab24ec1574d5633ec4370a6e8b6dac29b0a93996b0fde8803c074fdd68526b08c99f5842e5567674562256fc5276a1ee22a48ed66fc486b3bc0905dd10e9f854dfa3715be159082e8e12c499a6b23934aa9a124c4c0c30507f973e2516c143355485a2b647b1748f77f6f236106115a8ddcda2f", "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"}, [0x1, 0xfffffffffffffff8, 0x1, 0x80000001, 0x6b6, 0x401, 0x4, 0x81, 0x100000000, 0x8, 0x2, 0x3, 0x4000000, 0x1, 0x50000, 0xe4d, 0x100, 0x0, 0x1f, 0x28, 0x2, 0xfffffffffffffffc, 0xf9, 0xf7000000000, 0xfffffffffffffff7, 0x0, 0x1ff, 0x7fff, 0xff, 0x1, 0x5, 0x80, 0x7, 0x1000200000000, 0x9, 0x3ff, 0x9, 0x4, 0x85c, 0xffffffffffffff80, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x4, 0x1, 0x1, 0xa4, 0x100, 0x9, 0x100000000, 0x7, 0x5, 0x1, 0x2, 0x1, 0x8, 0x3, 0x58ee897f, 0x1, 0x3ff, 0x9]}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002840)={r4, "f2bfb568e33c5c433f75035fda02fd5c"}) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001300)={0x3, &(0x7f0000001280)=[{0x6, 0x1000, &(0x7f0000000180)="9e3bae407b0e8b55eab5ae55dec34a6c6ad842e93e8a5815f1e7bbae10ffa6e61ca44f7b3178c7887bd2fa1a677914dfb1ab8a6a2868c3074a82da8a9de679a1ce5337b79893d290b0e2e45afbc54ee972e9f802108613fe48836008cb0627d98ecdb387a9ada5d2ab1f287e0d132f3ab237b2e65f6c0cbff665f9cf1c7f972d9841a49de1e883f46b4022daaa7ca63958d55dca2407706d953dc99a74f436ed3767ccfe4b35fe352aa64851e9d535bc9301091bb8242cde74863b49d2107b45592401df78120f7c2cb0870cd390b3fa88dfbb9f2be85a917c5de066827b4d5350f2dd0d9e03f43c0b0fb17ddacaa60703aca14cba48b9751ce05a46bc3bd83c7a913b898a5afb1b289bfa67bca545f95c7d4ff7e0ab2076b3182e1e86caf77b638f0ffefa37d295316618067ef979f626ca4b457f5a98b37cf35e838c39558172bf783bcf9d0abf39f8e0087c1cb9c729202b631cfc77d640a1d5ca805ee75bd8bffef1dc3bbe32f4e0a1b1238a4c83b45dc957daeb8d696e049d1e628c1a701704a88326df43ab5c0355684856699c525a5c47ebab30db2e966f32d9a4f7c2bb5d61c32234fcffbfeda79afdbf9e6e9c4c359810034e2e682b3729c9f01f21c6157563b829b441af19c5537f62a34997b64cf23983e7a55e31effaaa8135513901ebb833bd126943f85e64804bb2c22e2dc393b4543ffff15a77e15dc832039fb4a02f99744ec0a2baec78f40c516ab727f91bd0debb7a96ac72750a8ebe0121ee7d51c1404de55cd1e618b3857f1da1e86845898a2388ea8a7197af0ffdbac0a3156bf6a090b62a26a7273a01d31c701098590f45fc52e15f3bdf09699e5703d761a772a752628beef6b38ecbca51341aa93c7b3551af1aaf8fb2b1ca71692804d8fbcfa173093c681e0597776ccb1ca26ed0eceae68d2e378ef24fc1f738f08a12f4dabe3be1bd13f16bf8288d69abb45f71493633448220f572a024992d3b50d4df45b5d5fa4d90aa443cf82bd25878fbd4cfc5e8aba7a8e9e2d316903b8a3b532ddabc7853e6800c997751bb8d2796cb10c0a42aa8a70d92d358b739e92afa2c0fc9b38969a63aac60b79285c504a8d05854c553c346dd04be887051aa8fb807712de05ae72a1db94505be8947e1dd8ea8391cd2c9423d37689400d8cf107ef506497dc62f989b074c615517006661efd0b4af16ad97856c6463123e4daeab9922b30b6024eedbc7f8854f62fbd552ce4153931e057aba0d7d7d86462ee04419a4744dca821532b60dac2bc09734734958566755effd9bebab3fedf8de8b94dd3e6df7a91f850e3f0a0e088920581bee2ef152947c8292de71cadf846529aaa53cad0769272524d119fdeda84e8a05a7aecad31f44feeaaf0dd1576842d600fc21b3127145affd1131383cb2e396e6823fd90a97a6e956b3e53e6e1377ea8859ee44bca3ea954ea78f92f725d53660923c1317e1f295dd647551d6b44bdb7a0b8882090702dd0c3183212bb9e960dbaa40f41585b819191764c73a10c248cd95c1664b8616c2a1a1b8b446c307fdd412aa5a887db88a0f7d64159459b6b5079188450370b86783fd6170b47df575a7c76a016f85f7d16051d286435184e952a39082a0787bd761d3c002fca4e816498aa22e98d6b40c87c9661daae5813a49df40f9e61e7f15a4c226ad120969ef23eeed836a498b7fc1ed4974ad5f8cf8b9c360d644b4206b79466c3d9530b880d3e62171feb783d6b4d783e46e56d052630077503ddd5cac1df047843d2385e544d1e90c9aa09f7c3eef60f22f75a26da9db5dfd15eb55badbc1ab0dcbd8bf2b49faa3247701260a8bc148b42c2461250a3fd8f2e9122e823f21a16e7ca80cc4d64edb4e6ab4afabc6ee049ab1674424b40985fd6c686b3925b38eb582c8375913dd556591f32d235474fa6fed30ee012ae3db5de4f223f2367034f79a5a5e5e855fe54e99c6b7956c4286d2c25e0dae7d18f44a5c57b0148aa657900f8a326178fbdcac546abbb80fca67c1dbccb4660c50d320f4c76e5014d32bbc34aa4ce32a1a93f00f94b50482082539eb60b7158846a2f9e48f386747b97398d7a835dfc7fb16f3f5492fda78f6c4f384c411fd99775b6f3b81cdb58dc283aea5068b449cbb57dfa52cdaf798c92f347d1cae19c2833ee0b6ba26adbc48fe697c50cdbe5cd8cdaf91916ee8984c8c8b92310169d086a8ab8d9e264adca4be355c7aaf66cdb909ab122d1119324df2f8d7bf7f0dc0f802eebfb064acbdf826414d94fe2ba7f3e38f951352c2ec0bf1fdc9f9b3c0b2012212097b887ccbe407f294c3674e9466f6f33fd7870156acc10aabe535d86a0ee2ee559ba4c4c7ef63b28babbfe859be0d09d01570ca2bee6d92a0d2d300f7396228326a2c5c5ac77eae84e2ca8879b6ab5c9dac527dcd78e8c015ea605374b35f9661c7fb3902e379d9b7e1d65edcf347117edb6098b81940b6ea5b928783577db76c712190ae39f9c0976cdb5a873ca5f345f08e547ff4df2d942641d423ddb43dfe25427ebabf76423de60bd208b006a92a413ae79b05bdabc808498682bdae1164b1fce72e058a21bc4ab2d550f1f7a7621175db215f892d8c2ccd1267450947896eda2e0a79d1301c5ca5c4deaa049d8e5e2ca29b1eeb56b6f002a70705f0f87beacd2d839719bdd58824fcbb56269a132f85143d13983317f5e9718e6d59df056e59c722f71a3eb3b8a90b26465c4ca304476bb2cb8a141ad0d074f2debc7a723c4e967dbaa4f05ad82be7de4c9ff31b608e80d055366bdf72e4f46c54148f4ec19f89ed016f831a7448e5b35901f85d185d687b89b63c38c4905377d13ea4682fefea3f10aa50411dbd0a836003d1212829305b16fad58d4bd3e7ab5b5d9abbb440a228abb014d8e1096befb7cdc4d2b32ac487e0f962a2f4fc9419aba9ea3862a882a10e9e9454fde8108199b1a45b938c75def2f80ee5cd474c4cab61322830c7039ea50d2e34177069cdbe24af74636672f739ad4e4dca7667471d8aba57b40ce8eb9a8767a783af5f7fd4b4828ae9d3667a0f23abefd7f2f5836301b4383a7961b8fc49f5adc65cb62b98196b0d16878b1415f0f2fe33c66a0429341bfc07b00563d90dd7a918fb7868d56e518dc5fe3aa16fb86de90d98dee9005ea86ea4dc5965d747cb2e46c1795a62475466d5c2f635af0c1b68504cb3f49648579402dc2457de3b42e7f8ade91284da0fb9d9fa1bd9ada24b22151db543e588363c4d8484f8d9c47fb857d44c9e56b7fa470d310e1b116bc6fe38357e1f4e4e2e8bcdec2da800bab0447953d98761bd28c699fb619ce1c588f0e6856b67ff501d157d243aafd8b38f7bc128cf88f29ea622b78547f77ed3a15475ec944682fc22d5b6e221326e7ceb35589d7f184dc7b5fc929ca7eda8455070f00a311c2ee6183487d1026b0531dff6a1ac42e77a0b64c6ae169bc1412ad6227ad9c3fb35dfa2dae7459105e5460c4ea3f7a51408c6c37929a94c244e30c3c7acbf027d59cee93c5bf282d2bb2c8df50e0a54340f9b72d7f4b81a6dfe0b5fc117b84fe7b4424dc2c09ce5ee50eec0d3125c73f950e2eb5cdc6d8ff0e2f25512b86ca0c7cefe4d4b077077d67d9efd234dfcfc01e3d8a497cace55da2f45a4f29d4b40a1b3e505bce6961f108b94863a471ee9d72147ac47e93668b65e3cf274d4cdcaaac5052658b5843a71463207a5aef109cb6bd171453fad7f50aaae41db4fa8d32ae68c595a6359adf2a792ab835ee1db4b1446ced6ff7b6a012bd01fdf32ecb62ac2380017a4143eb58c3d9a4e58008ccacdd342acc0fcaff5641317ad3dedf9ed48ad34958db1b441ce705eee93e4a78220e55306415a3dcbb33493d7c50b3ec29fc31e78851194e6abb5d847760b3fd731db58d30fc16d92f5661c64e7038db836c4d4ac51557116b6f3b9251dcee4e800204f63494cb1fbde42ecf3997c609c2e6cdff20de1d069fdb99c6d0d30d57535208c124a4111e78eea870bbc2ce5fc608c47497423332d22fa73ebb317a6a3e8074cdb7fdccccf1da6fdd686fa127f1f78dbae240e8e46f1a024eb22bddf4f85d4beff52d15de81492541cc36334ef54a20dbfcac4a558152a6698b09b4729e1e1d3678c7274bf5e6d90e4b8dc002a9943d29cc32c236abbdb1598330b7418e7eafe991306b01f7b142d81d4c4688b1aeae8bfd0faac88a9f38fd8d50d76eb8ceed0eb1ad4a9321470c4d3db282b297e43ba0ae9628cab479e6aec7544248b8a54c0b0152dff3c2cfc25c852a7276ebe4a0fdfa5122d72c3d45cbd112aea08c39b8a82c2ed16b3418d1634ffe1ca19c7a3fa36a8db529741eb9190ea3e916963f2e6099c59051f99c180482d10ad2e441f5ce705cd13cc141be096151060f498d3643b028e90313881bb8ba303fe5ae636c90d7764ca1cbddd790f32f9f463620bd4b81bb3fe703947b3dc58c285ae4ed220c570caa7db8611b6a218bf6518c8f939d78d1f9ed59eb91c04e4f13cfa0fe79dbafeac820054e4a8d802a1b42171458abcd22be382a7ae50e965feb53a1d0d42b31d4e78f75282badb72de90d35c8c30286d504b5736eacfde81a9375c77e6493345c8c751c5c0f323b4b7733f704d19ba855363b87c677e9cd92c6ee6c38a6c64c553e38c7ac74b7dc9de72f44100f6cfdc55079186da819aab0a1733b5f7301834772fe5239f7baa18a663eafe1ba93c91e6a705cbd5c2569c2801302d816a6c1b3040b1d47108f6536de8de099cf36ca9725f08333080c89aa3c997b96c7fb69174a54725f1a7d95987ebfe7b3699135a295fa95eaad1138c929623cf41fee19aec1dfb29d5b5c10c2d37bbcedae56b0781b136c50e1c73cefdbcc6a40f42adfbc14cc1cf11a4d01b8a9425015cc21c97ca7c9fa651ba2ed31520d4994df4afca6071d423cc9972a7454d3a0fdb0d94857b368d89a69e7d3fa7cde475694bfaec13a960819c837f7ac8d3193d4b4dd6a6ba8725bf56a4abffb4e10d8242e9dce7a9bd1e9391ffb1a74d4456d0c1247f6b76735ea1a7482042316a8cdf29c0c7ca88ddb08515b257a721f5a42286e34aeddda94356e87257d243d0e22db826929e1d91efa336c1379ac0b48c85ed327f991b6d6daefa3a5a9e7bdba629197b987fd7e422dc8fed91f285ac8c3244ee42a3a827e6d43c25a6bb23a1b3a1766d42efacc0a194ef3bbc521efcf915b54b9a3ba00bb6bda91ee2d1ba5b7cda2bc2ea381a4ec551a6a532842ff25499084b443c8bf385438b9d48d31ae57b5bca6a3a8162e63a7d2061ed28c77882df6e050f63c8d0ab1bd6a8f1342cf49c0d30a17d5e2c56bd9e4049b63ca5bf95ddaf41d91a8be8471a9da16770b7c3e300db054b8328badb09672ea74db3d653530dfebc08ca2c65cce47b65af5d886164137542cde46dc5e05b83bafed204c6190f512d1715df139b54f43400df7e6d8a6bb92812b42e6f03490b270e468340304773ace501d50e5621d29a6409a67816f152f7d27ca7e734f9780339106f1ca61fe958ed86686bfd5e29999b0ab86183635c22b9d38d4b8650e63e4d1f0e9fcf4bb2fe2896b18c765746d7e5534f297b7f2166ca7c51e028c5a07150b9986518ce986c5c972382f5d26e3fd64dc6abc019bedcb9e2d31976ea65f6d0bf1961b1f5dec463e10b45e44f33ed7fbeeb47c4dd50a0fc80c4f980d197b51e6ce7c377f39ba8ff10631ccbbbb318b4f96b64a4205d3c9b674cb758bf6dbcf205dcc440c3f79c15ffc8602dc49501bc6d", 0x1, 0x1}, {0x0, 0xab, &(0x7f0000001180)="fd98973d71a7fbbd0371f76c7fd9c362cbb77a30640a3e40c07660b01ed36efcd4f8bcb8d74260e29ad9edc5a8f50bdcf054058319235a56a32069a056d37ae8a85f763a3a70bd6d46db488f7c19ba34a39d4f4666e6b4e1cb37ee80b0b5d1bb91aedae766ae49006316e434f9a7b9811d023c58f5dd501bba8654c2388fe09799dfd416adffba8138e900da62203fec2b60c17e9466174441ba0011e36361c482d9f9efae5b6284e1c9a7", 0x0, 0x1}, {0x40, 0x34, &(0x7f0000001240)="200b850c7cb800fd0f778c40083781a39fb4696f79e8c2ef3addd4c34ed5b5c270ee3747a64d046df06599c88eec8f43f60841d7", 0x1}]}) sendfile(r2, r0, 0x0, 0x4000007ffffffc) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x100000) [ 2017.904977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2017.985308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.003055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.019220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.154111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.165913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.178772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.183838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.207872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 [ 2018.210586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10926 comm=syz-executor.6 20:19:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:18 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000000, 0x0, 0x0, 0x0) 20:19:18 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 20:19:18 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) 20:19:18 executing program 6: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00\x00', 0x2}, {&(0x7f0000000700)="3b2d95bf6923932acddce28286696baef1139165b6c1327f20c35f7c45950add387521ca3081b09d6487d2a8f8fe88e43d9e1501e2f760b93b1beb982b16b1b90408bdff3ac266488dcd43799f4418e209ed649e59cd505f38b31d37711f9ad2f38574693577eb1d48d5de45acdc8bfdcd7ad5a0d831b84026cc465b100c7770abf732d4420d2620f235204a95148d48a39423590cde9c4e3c", 0x99}, {&(0x7f00000007c0)}], 0x3, 0x0, 0x7fffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) fallocate(r2, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat(r3, &(0x7f00000001c0)='./file0/file0\x00', 0x400583, 0x90fa1e1991abc516) syz_open_dev$ptys(0xc, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 20:19:18 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000300)={0x0, 0xfb, 0x1015, 0x4, 0x5, "7bff4196bbdfbff4345226468184d4dd", "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"}, 0x1015, 0x1) r4 = syz_io_uring_complete(r1) r5 = openat(r4, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x138) copy_file_range(r5, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:19:18 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x42000000, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2034.571026] FAULT_INJECTION: forcing a failure. [ 2034.571026] name failslab, interval 1, probability 0, space 0, times 0 [ 2034.573776] CPU: 0 PID: 10964 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 2034.575238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2034.576972] Call Trace: [ 2034.577538] dump_stack+0x107/0x167 [ 2034.578311] should_fail.cold+0x5/0xa [ 2034.579109] ? create_object.isra.0+0x3a/0xa20 [ 2034.580058] should_failslab+0x5/0x20 [ 2034.580841] kmem_cache_alloc+0x5b/0x310 [ 2034.581677] ? mark_held_locks+0x9e/0xe0 [ 2034.582531] create_object.isra.0+0x3a/0xa20 [ 2034.583432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2034.584470] kmem_cache_alloc_bulk+0x168/0x320 [ 2034.585427] io_submit_sqes+0x6f76/0x85c0 [ 2034.586314] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2034.587336] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2034.588323] ? lock_downgrade+0x6d0/0x6d0 [ 2034.589168] ? find_held_lock+0x2c/0x110 [ 2034.589999] ? io_submit_sqes+0x85c0/0x85c0 [ 2034.590915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2034.591904] ? wait_for_completion_io+0x270/0x270 [ 2034.592891] ? rcu_read_lock_any_held+0x75/0xa0 [ 2034.593844] ? vfs_write+0x354/0xa70 [ 2034.594618] ? fput_many+0x2f/0x1a0 [ 2034.595364] ? ksys_write+0x1a9/0x260 [ 2034.596137] ? __ia32_sys_read+0xb0/0xb0 [ 2034.596980] do_syscall_64+0x33/0x40 [ 2034.597745] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2034.598796] RIP: 0033:0x7f818218db19 [ 2034.599554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2034.603302] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2034.604845] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 2034.606288] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 2034.607748] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2034.609191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2034.610653] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:19:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:35 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) 20:19:35 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) 20:19:35 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0xfeffffff, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:35 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file1\x00'}) io_uring_enter(r4, 0x44d9, 0x0, 0x1, 0x0, 0xfffffef6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x1000, 0x800, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r8, r9, 0x1000) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010007000000000002000e00", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040004000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="16200200", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="10000600000000002000050000000000"], 0x84, 0x3) fallocate(r4, 0x1e, 0x40, 0xfffffffffffff4de) sendfile(r5, r7, 0x0, 0x20d315) r10 = accept$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r6, 0x7, {0x0, r10}, 0x10000, 0x3, 0x1, {0x0, r11, r3}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f58, 0x58cd, 0x1, &(0x7f0000000040)={[0x8]}, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x1f, 0x4, 0xff, 0x4b, 0x0, 0x87e, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0x4}, 0x40001, 0x9, 0x2, 0x3, 0xfffffffffffffb72, 0x8, 0x5, 0x0, 0x101, 0x0, 0x57}, 0x0, 0x3, r7, 0x2) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:19:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:35 executing program 6: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200002802000002", 0x61, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000280)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b8c3f3c1aa396415dd0a7ffd1ad8f12a0550226bd1e28d87988166"]) ftruncate(0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000180)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xa563, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x80) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) write$binfmt_aout(r4, &(0x7f00000002c0)={{0x10b, 0x30, 0x6, 0xcf, 0x3c6, 0x1, 0x39f}, "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"}, 0x1020) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = creat(&(0x7f0000000540)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x80, 0x4c, 0x6, 0x9, 0x2, 0x3e, 0x1, 0x33f, 0x40, 0x3ac, 0x9, 0x9, 0x38, 0x1, 0x5, 0xf781, 0x47c}, [{0x6, 0x6, 0x3f, 0x0, 0x0, 0x259057b3, 0x7, 0x2}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x676) fallocate(r7, 0x0, 0x0, 0x8000) 20:19:35 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) [ 2051.485081] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2051.501735] FAULT_INJECTION: forcing a failure. [ 2051.501735] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.504162] CPU: 0 PID: 10997 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 2051.504174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2051.504182] Call Trace: [ 2051.504210] dump_stack+0x107/0x167 [ 2051.504236] should_fail.cold+0x5/0xa [ 2051.504260] ? create_object.isra.0+0x3a/0xa20 [ 2051.504283] should_failslab+0x5/0x20 [ 2051.504307] kmem_cache_alloc+0x5b/0x310 20:19:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2051.504331] ? mark_held_locks+0x9e/0xe0 [ 2051.504355] create_object.isra.0+0x3a/0xa20 [ 2051.504375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2051.504402] kmem_cache_alloc_bulk+0x168/0x320 [ 2051.504431] io_submit_sqes+0x6f76/0x85c0 [ 2051.504490] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2051.504508] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2051.504533] ? lock_downgrade+0x6d0/0x6d0 [ 2051.504549] ? find_held_lock+0x2c/0x110 [ 2051.504575] ? io_submit_sqes+0x85c0/0x85c0 [ 2051.504605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2051.504630] ? wait_for_completion_io+0x270/0x270 [ 2051.504654] ? rcu_read_lock_any_held+0x75/0xa0 [ 2051.504672] ? vfs_write+0x354/0xa70 [ 2051.504696] ? fput_many+0x2f/0x1a0 [ 2051.504716] ? ksys_write+0x1a9/0x260 [ 2051.504735] ? __ia32_sys_read+0xb0/0xb0 [ 2051.504775] do_syscall_64+0x33/0x40 [ 2051.504797] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2051.504810] RIP: 0033:0x7f818218db19 [ 2051.504831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.504840] RSP: 002b:00007f817f6e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2051.504861] RAX: ffffffffffffffda RBX: 00007f81822a1020 RCX: 00007f818218db19 [ 2051.504872] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 2051.504883] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2051.504894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2051.504905] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 20:19:51 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 20:19:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:51 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 20:19:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000c7b2a4502ed64a6eb421652eb677bbba010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000000140)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af3", 0x2a, 0x1800}], 0x0, &(0x7f0000013800)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200a01, 0x10) 20:19:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0xfffffffe, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:51 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3fa, 0x200, 0x70bd29, 0x25dfdbfd, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) [ 2067.111786] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 2067.114603] FAULT_INJECTION: forcing a failure. [ 2067.114603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2067.117976] CPU: 0 PID: 11037 Comm: syz-executor.5 Not tainted 5.10.197 #1 [ 2067.118806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2067.119791] Call Trace: [ 2067.120204] dump_stack+0x107/0x167 [ 2067.120644] should_fail.cold+0x5/0xa [ 2067.121098] _copy_from_user+0x2e/0x1b0 [ 2067.121577] kstrtouint_from_user+0xbd/0x220 [ 2067.122110] ? kstrtou8_from_user+0x210/0x210 [ 2067.122683] ? lock_acquire+0x197/0x470 [ 2067.123181] ? ksys_write+0x12d/0x260 [ 2067.123664] proc_fail_nth_write+0x78/0x220 [ 2067.124199] ? proc_task_getattr+0x1f0/0x1f0 [ 2067.124751] ? __fget_files+0x296/0x4c0 20:19:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2067.125266] ? proc_task_getattr+0x1f0/0x1f0 [ 2067.125922] vfs_write+0x29a/0xa70 [ 2067.126378] ksys_write+0x12d/0x260 [ 2067.126837] ? __ia32_sys_read+0xb0/0xb0 [ 2067.127355] do_syscall_64+0x33/0x40 [ 2067.127821] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2067.128455] RIP: 0033:0x7f81821405ff [ 2067.128927] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2067.131257] RSP: 002b:00007f817f6e2170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2067.132232] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81821405ff [ 2067.133136] RDX: 0000000000000001 RSI: 00007f817f6e21e0 RDI: 0000000000000004 [ 2067.134019] RBP: 00007f817f6e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2067.134938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2067.135834] R13: 00007ffd3418418f R14: 00007f817f6e2300 R15: 0000000000022000 [ 2067.138248] EXT4-fs (loop6): get root inode failed [ 2067.139476] EXT4-fs (loop6): mount failed 20:19:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 2067.280181] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 2067.292854] EXT4-fs (loop6): get root inode failed [ 2067.294042] EXT4-fs (loop6): mount failed 20:19:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:51 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:19:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:19:51 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:19:51 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=ANY=[@ANYBLOB="7f4e1ecd2000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="0c001100fcffffffffffffffb13e0ed3aaef65785139682e1919add3c90a28d639fd48bf5e3f7769eae70235aa51134131e6e805464800000000000000ad92711a8ad0788b22e2bae5eec00d154fd48a628e31c17e93b4addae0a652be301944fc3c1d9c77e9fe6ac0064cf5ee3b060d07db77363e9db8b1e0581ef0325fa3e3a1603ecef0b1684940b905bb79c78890ee8853a3feadf29e2a5a1839b70997bbf51fa074490868fdd48d8a64b5424f67986d1bccdfbf5a711e4e3fb4d30588b5dd04a7a09fd90ca7a67e204f6d7587fd47fec16315390dc786ab7fa44b59f64f6b03a96334bc3d695733a7c2221b04206d1add1d522f3563000000000000000000000000f3f9931ad669631edc47f81f782b6eb87123f9e93b06b10100096efc9344e31cf140baa5e267eee16e132a76de6f48b9389d650230a026144fb262d6d932aad9e6726c0f52e80fb909aeba849bd479e17210b20875d9a0c3f959b5ac57a88fe4450ddaff7876ed15d934e76278632ae6355de9e5b6a1b01972edad24258d2124832ec44846260fb2a6074c7d92f9f6b63a40b1a89ec0d2e6f70e84cdca0d3bd5102570157e056741c6c3f8b71c37f5859638ec6f948f810681841eb8"], 0x28}}, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000002a80)={0x10c8, 0x25, 0x200, 0x70bd27, 0x25dfdbfc, {0x8}, [@typed={0x8, 0x78, 0x0, 0x0, @uid=0xee00}, @nested={0x109e, 0x19, 0x0, 0x1, [@typed={0x4, 0x1d}, @generic="523af3f0563524ab1e2593ff1e8100f3ecc9ee928f45dabd315cdbd66e4b6df7de3d90942a1f856515144ced9586c7597d0334a371573fa3cba461be2fc1c13886b3bee3a316e2722226cd6170d720907acf16922d243f1b69a40dc8d4321591d4a6847213adde22f5d7", @typed={0x8, 0x87, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r1}, @generic="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", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0xfff}]}, @typed={0x4, 0x61}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x100}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) close_range(r1, r0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x1000, 0x1) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80042, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0x40010, r4, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x7, &(0x7f0000000280), 0x1, 0x1, 0x0, {0x0, r9}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000580)={0x0, 0x200, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={r10, "7ac5a6d13c99bfa1f97215c2b721a1a6"}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x20000, 0x2, 0xb}, 0x18) 20:20:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:11 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:11 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) 20:20:11 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:11 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:11 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) 20:20:11 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:11 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f00000001c0)={0x32, @rand_addr=0x64010100, 0x4e21, 0x4, 'dh\x00', 0x0, 0x1, 0x14}, 0x2c) 20:20:11 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:11 executing program 7: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 20:20:11 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:11 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:12 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2, 0x0, 0x0, 0x0) 20:20:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) 20:20:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:12 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) 20:20:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:12 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x18, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2103.718959] FAULT_INJECTION: forcing a failure. [ 2103.718959] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.722133] CPU: 1 PID: 11181 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2103.723828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2103.725833] Call Trace: [ 2103.726484] dump_stack+0x107/0x167 [ 2103.727402] should_fail.cold+0x5/0xa [ 2103.728326] ? getname_flags.part.0+0x50/0x4f0 20:20:28 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6, 0x0, 0x0, 0x0) 20:20:28 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:28 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) 20:20:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 1) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 2103.729437] should_failslab+0x5/0x20 [ 2103.730440] kmem_cache_alloc+0x5b/0x310 [ 2103.731501] getname_flags.part.0+0x50/0x4f0 20:20:28 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) 20:20:28 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051bc0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r17}], 0xa6, "ff10e27a1d2b4e"}) r18 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r18, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 2103.732585] user_path_at_empty+0xa1/0x100 [ 2103.733592] inotify_find_inode+0x2e/0x110 [ 2103.734456] __x64_sys_inotify_add_watch+0x1f1/0x350 [ 2103.735515] ? __do_sys_inotify_init+0x90/0x90 [ 2103.736475] do_syscall_64+0x33/0x40 [ 2103.737235] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2103.738283] RIP: 0033:0x7faf32072b19 [ 2103.739066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2103.742828] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2103.744397] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2103.745858] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2103.747344] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2103.748841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.750300] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:20:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:28 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) write(r5, &(0x7f0000000300)="3d41160db4733a96de9ea4b7441f6ccdce7f8b5e189332e1a0c4127bcf7e7847d88ce8a8ac771fbd9ed6600979ec536dfaeb87af4ba89c7347a6129c21c5c913333ec3df20ec305ca109c46267eb4ff2fe1f39c9bec1bb6b1d59c27c16eba0f0ecc7332fc9f65bf12e5bd42080eace5a2ed45589431f2bc55ee68f0f8b69dd35daf971d2f727e338158888c484958b9d76a98082ff618e73bf046036043174fbf1e806831f9d44e8ecafd5b9a17d8dd62f2da15202fe9728987ae8640654c258a2f30ab4beaf67b9857de342740cc14ec6952d026559ac31c7f8f225e6", 0xdd) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2119.036190] FAULT_INJECTION: forcing a failure. [ 2119.036190] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.038914] CPU: 1 PID: 11222 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2119.040349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2119.042017] Call Trace: [ 2119.042552] dump_stack+0x107/0x167 [ 2119.043290] should_fail.cold+0x5/0xa [ 2119.044079] ? create_object.isra.0+0x3a/0xa20 20:20:43 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x42, 0x0, 0x0, 0x0) 20:20:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 2) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:43 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc, 0x0, 0x0, 0x0) 20:20:43 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x24, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:43 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x102}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000040)=[r4, r4, r0, r8], 0x4) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:43 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:43 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x20000000, 0x0, 0x0, 0x0) [ 2119.045111] should_failslab+0x5/0x20 [ 2119.045920] kmem_cache_alloc+0x5b/0x310 [ 2119.046741] create_object.isra.0+0x3a/0xa20 [ 2119.047645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2119.048670] kmem_cache_alloc+0x159/0x310 [ 2119.049512] getname_flags.part.0+0x50/0x4f0 [ 2119.050400] user_path_at_empty+0xa1/0x100 [ 2119.051257] inotify_find_inode+0x2e/0x110 [ 2119.052116] __x64_sys_inotify_add_watch+0x1f1/0x350 [ 2119.053275] ? __do_sys_inotify_init+0x90/0x90 [ 2119.054216] do_syscall_64+0x33/0x40 [ 2119.054980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2119.056036] RIP: 0033:0x7faf32072b19 [ 2119.056806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.060788] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2119.062328] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2119.063792] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2119.065231] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2119.066803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2119.068360] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:20:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2134.492258] FAULT_INJECTION: forcing a failure. [ 2134.492258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2134.495095] CPU: 0 PID: 11257 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2134.496555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.498295] Call Trace: [ 2134.498857] dump_stack+0x107/0x167 [ 2134.499618] should_fail.cold+0x5/0xa [ 2134.500438] strncpy_from_user+0x34/0x470 [ 2134.501315] getname_flags.part.0+0x95/0x4f0 [ 2134.502250] user_path_at_empty+0xa1/0x100 [ 2134.503134] inotify_find_inode+0x2e/0x110 [ 2134.504037] __x64_sys_inotify_add_watch+0x1f1/0x350 [ 2134.505089] ? __do_sys_inotify_init+0x90/0x90 [ 2134.506055] do_syscall_64+0x33/0x40 [ 2134.506830] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2134.507896] RIP: 0033:0x7faf32072b19 [ 2134.508676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.512802] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2134.514363] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2134.515856] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2134.517314] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2134.518771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2134.520238] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:20:58 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12, 0x0, 0x0, 0x0) 20:20:58 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) 20:20:58 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:58 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:20:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20d315) ftruncate(r1, 0x7) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x122, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r3, 0x44d5, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:20:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 3) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:58 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) 20:20:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x400, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:20:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 4) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:20:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2134.735070] FAULT_INJECTION: forcing a failure. [ 2134.735070] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.737267] CPU: 1 PID: 11286 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2134.738139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.739266] Call Trace: [ 2134.739692] dump_stack+0x107/0x167 [ 2134.740124] should_fail.cold+0x5/0xa [ 2134.740572] ? inotify_update_watch+0x2b2/0x7a0 [ 2134.741117] should_failslab+0x5/0x20 [ 2134.741556] kmem_cache_alloc+0x5b/0x310 [ 2134.742074] inotify_update_watch+0x2b2/0x7a0 [ 2134.742680] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2134.743278] ? __do_sys_inotify_init+0x90/0x90 [ 2134.744028] do_syscall_64+0x33/0x40 [ 2134.744484] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2134.745254] RIP: 0033:0x7faf32072b19 [ 2134.745740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.748174] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2134.749202] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2134.750132] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2134.751027] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2134.751942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2134.752825] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:20:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xa1, 0x0) 20:20:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 5) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2134.954146] FAULT_INJECTION: forcing a failure. [ 2134.954146] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.955765] CPU: 1 PID: 11291 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2134.956684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.957556] Call Trace: [ 2134.957943] dump_stack+0x107/0x167 [ 2134.958361] should_fail.cold+0x5/0xa [ 2134.958776] ? create_object.isra.0+0x3a/0xa20 [ 2134.959284] should_failslab+0x5/0x20 [ 2134.959692] kmem_cache_alloc+0x5b/0x310 [ 2134.960143] create_object.isra.0+0x3a/0xa20 [ 2134.960612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2134.961159] kmem_cache_alloc+0x159/0x310 [ 2134.961609] inotify_update_watch+0x2b2/0x7a0 [ 2134.962100] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2134.962644] ? __do_sys_inotify_init+0x90/0x90 [ 2134.963140] do_syscall_64+0x33/0x40 [ 2134.963541] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2134.964104] RIP: 0033:0x7faf32072b19 [ 2134.964501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.966488] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2134.967314] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2134.968226] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2134.969010] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2134.969786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2134.970560] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:20:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xa1, 0x0) 20:21:14 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) 20:21:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xa1, 0x0) 20:21:14 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 6) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:14 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x30, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:21:14 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x25bb, &(0x7f00000001c0)={0x0, 0x5557, 0x1, 0x1, 0x186, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, r4, &(0x7f0000000300), &(0x7f0000000400)='./file1\x00', 0x40, 0x1000}, 0x6) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:14 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) 20:21:14 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18, 0x0, 0x0, 0x0) [ 2150.175428] FAULT_INJECTION: forcing a failure. [ 2150.175428] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.178912] CPU: 0 PID: 11312 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2150.180371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.182089] Call Trace: [ 2150.182646] dump_stack+0x107/0x167 [ 2150.183403] should_fail.cold+0x5/0xa [ 2150.184208] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2150.185400] should_failslab+0x5/0x20 [ 2150.186192] kmem_cache_alloc+0x5b/0x310 [ 2150.187064] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2150.188265] idr_get_free+0x4b5/0x8f0 [ 2150.189081] idr_alloc_u32+0x170/0x2d0 [ 2150.189914] ? __fprop_inc_percpu_max+0x130/0x130 [ 2150.190935] ? lock_acquire+0x197/0x470 [ 2150.191778] ? inotify_update_watch+0x33d/0x7a0 [ 2150.192845] idr_alloc_cyclic+0x102/0x230 [ 2150.193811] ? idr_alloc+0x130/0x130 [ 2150.194588] ? rwlock_bug.part.0+0x90/0x90 [ 2150.195498] inotify_update_watch+0x355/0x7a0 [ 2150.196447] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2150.197524] ? __do_sys_inotify_init+0x90/0x90 [ 2150.198493] do_syscall_64+0x33/0x40 [ 2150.199286] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2150.200389] RIP: 0033:0x7faf32072b19 [ 2150.201176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.205053] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2150.206617] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2150.208151] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2150.209642] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.211131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2150.212623] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:21:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:21:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:21:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:21:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 20:21:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 20:21:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 20:21:15 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x36, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:21:15 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) open(&(0x7f0000000440)='./file1\x00', 0x80, 0x88) r7 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4, 0x1, &(0x7f0000000300)=[{&(0x7f0000000240)="d0deb49fd041", 0x6, 0xffffffffffffffe0}], 0x12082, &(0x7f0000000480)=ANY=[@ANYBLOB="737472fe5f03b73f9b9a6970653d3078303030303030303038303030303030302c6461782c66756e633d43524544535f434845434b2c636f6e746578743d726f6f", @ANYRESDEC, @ANYBLOB="2c6861f3683e7afd8f6bd61acf2885255dd16114380500"/37, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r8 = openat(r7, &(0x7f00000003c0)='./file1\x00', 0x0, 0x11) openat(r8, &(0x7f0000000400)='./file1\x00', 0x4082, 0x5c249f0dce9386b8) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r6, 0x0, 0x10001, 0x0) mkdirat(r9, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) openat(r9, &(0x7f0000000040)='./file1\x00', 0xa0001, 0xc0) 20:21:31 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:21:31 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e, 0x0, 0x0, 0x0) 20:21:31 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) 20:21:31 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) 20:21:31 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 7) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 1) 20:21:31 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) statx(r4, &(0x7f0000000040)='.\x00', 0x1000, 0x804, &(0x7f0000000300)) [ 2166.910881] FAULT_INJECTION: forcing a failure. [ 2166.910881] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.912616] CPU: 0 PID: 11369 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2166.913590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.914609] Call Trace: [ 2166.914951] dump_stack+0x107/0x167 [ 2166.915408] should_fail.cold+0x5/0xa [ 2166.915873] ? create_object.isra.0+0x3a/0xa20 [ 2166.916437] should_failslab+0x5/0x20 [ 2166.916915] kmem_cache_alloc+0x5b/0x310 [ 2166.917409] FAULT_INJECTION: forcing a failure. [ 2166.917409] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.918740] ? register_lock_class+0xbb/0x17b0 [ 2166.918895] create_object.isra.0+0x3a/0xa20 [ 2166.918907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2166.918924] kmem_cache_alloc+0x159/0x310 [ 2166.918949] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2166.918967] idr_get_free+0x4b5/0x8f0 [ 2166.923133] idr_alloc_u32+0x170/0x2d0 [ 2166.923605] ? __fprop_inc_percpu_max+0x130/0x130 [ 2166.924193] ? lock_acquire+0x197/0x470 [ 2166.924711] ? inotify_update_watch+0x33d/0x7a0 [ 2166.925285] idr_alloc_cyclic+0x102/0x230 [ 2166.925794] ? idr_alloc+0x130/0x130 [ 2166.926285] ? rwlock_bug.part.0+0x90/0x90 [ 2166.926815] inotify_update_watch+0x355/0x7a0 [ 2166.927363] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2166.928012] ? __do_sys_inotify_init+0x90/0x90 [ 2166.928588] do_syscall_64+0x33/0x40 [ 2166.929034] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2166.929685] RIP: 0033:0x7faf32072b19 [ 2166.930146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.932482] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2166.933388] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2166.934299] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2166.935193] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.936099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.937012] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 [ 2166.937949] CPU: 1 PID: 11375 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2166.939365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.941033] Call Trace: [ 2166.941575] dump_stack+0x107/0x167 [ 2166.942312] should_fail.cold+0x5/0xa [ 2166.943081] ? alloc_pipe_info+0x10a/0x590 [ 2166.943930] should_failslab+0x5/0x20 [ 2166.944706] kmem_cache_alloc_trace+0x55/0x320 [ 2166.945626] alloc_pipe_info+0x10a/0x590 [ 2166.946447] splice_direct_to_actor+0x774/0x980 [ 2166.947378] ? _cond_resched+0x12/0x80 [ 2166.948173] ? inode_security+0x107/0x140 [ 2166.949007] ? pipe_to_sendpage+0x380/0x380 [ 2166.949888] ? selinux_file_permission+0x92/0x520 [ 2166.950866] ? do_splice_to+0x160/0x160 [ 2166.951704] ? security_file_permission+0x24e/0x570 [ 2166.952726] do_splice_direct+0x1c4/0x290 [ 2166.953585] ? splice_direct_to_actor+0x980/0x980 [ 2166.954548] ? selinux_file_permission+0x92/0x520 [ 2166.955566] ? security_file_permission+0x24e/0x570 [ 2166.956604] vfs_copy_file_range+0x4f8/0x1290 [ 2166.957549] ? generic_file_rw_checks+0x240/0x240 [ 2166.958530] ? __fget_files+0x296/0x4c0 [ 2166.959360] __do_sys_copy_file_range+0x193/0x420 [ 2166.960367] ? vfs_copy_file_range+0x1290/0x1290 [ 2166.961317] ? ksys_write+0x1a9/0x260 [ 2166.962096] ? __ia32_sys_read+0xb0/0xb0 [ 2166.962941] do_syscall_64+0x33/0x40 [ 2166.963714] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2166.964777] RIP: 0033:0x7febae821b19 [ 2166.965533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.969375] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2166.970908] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2166.972348] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2166.973789] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2166.975241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.976711] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 2) [ 2167.078676] FAULT_INJECTION: forcing a failure. [ 2167.078676] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.081176] CPU: 0 PID: 11383 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2167.082548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.084202] Call Trace: [ 2167.084738] dump_stack+0x107/0x167 [ 2167.085476] should_fail.cold+0x5/0xa [ 2167.086238] ? create_object.isra.0+0x3a/0xa20 [ 2167.087150] should_failslab+0x5/0x20 [ 2167.087920] kmem_cache_alloc+0x5b/0x310 [ 2167.088763] create_object.isra.0+0x3a/0xa20 [ 2167.089621] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2167.090619] kmem_cache_alloc_trace+0x151/0x320 [ 2167.091455] alloc_pipe_info+0x10a/0x590 [ 2167.092207] splice_direct_to_actor+0x774/0x980 [ 2167.093020] ? _cond_resched+0x12/0x80 [ 2167.093701] ? inode_security+0x107/0x140 [ 2167.094395] ? pipe_to_sendpage+0x380/0x380 [ 2167.095128] ? selinux_file_permission+0x92/0x520 [ 2167.095971] ? do_splice_to+0x160/0x160 [ 2167.096750] ? security_file_permission+0x24e/0x570 [ 2167.097656] do_splice_direct+0x1c4/0x290 [ 2167.098469] ? splice_direct_to_actor+0x980/0x980 [ 2167.099294] ? selinux_file_permission+0x92/0x520 [ 2167.100241] ? security_file_permission+0x24e/0x570 [ 2167.101131] vfs_copy_file_range+0x4f8/0x1290 [ 2167.102032] ? generic_file_rw_checks+0x240/0x240 [ 2167.102872] ? __fget_files+0x296/0x4c0 [ 2167.103688] __do_sys_copy_file_range+0x193/0x420 [ 2167.104568] ? vfs_copy_file_range+0x1290/0x1290 [ 2167.105379] ? ksys_write+0x1a9/0x260 [ 2167.106050] ? __ia32_sys_read+0xb0/0xb0 [ 2167.106811] do_syscall_64+0x33/0x40 [ 2167.107490] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.108381] RIP: 0033:0x7febae821b19 [ 2167.109113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.112642] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2167.113952] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2167.115137] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2167.116348] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2167.117539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.118726] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:31 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_setup(0x70f6, &(0x7f00000001c0)={0x0, 0xfeb5, 0x0, 0x2, 0x3c7, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000f00)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000e80)={0x2440, 0x82, 0x10}, &(0x7f0000000ec0)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x9b) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x2, 0x8c, 0x1c5, 0x3, 0x3, 0x101, 0x398, 0x40, 0x298, 0x800, 0x7, 0x38, 0x2, 0x2, 0x7, 0x286}, [{0x60000000, 0x8, 0x1000, 0x69, 0x0, 0x2, 0x2, 0x6}], "e0d12c4b379fb37de259d41aa1f8b63095fef9676e2b052f4b524d8dde7032d07723a6a6e059755537381117c71429209c67ae40dbdb40520973b203f942ee99ba509e57135af42490d75219cac03713a21b36004f9e10de7eec9a54fde41fc8b720bc3338e4c7bddf3757cec69b0bcf89d947bb3c8532a692a64c19deb05687b0282497f40abb27915416dfd1ed557f168193fb1484437cbe1604ff0fdda6940dd642328e9d3d6e0bf7628363ff0aeb6bf41449835db31e367dc8ffb4535c8b956df529961f838d2853f15680864c90a9c6166ce0a73570040e1c653c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb55) sendfile(r5, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 3) [ 2167.255934] FAULT_INJECTION: forcing a failure. [ 2167.255934] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.258081] CPU: 0 PID: 11388 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2167.259214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.260614] Call Trace: [ 2167.261071] dump_stack+0x107/0x167 [ 2167.261705] should_fail.cold+0x5/0xa [ 2167.262339] ? alloc_pipe_info+0x1e5/0x590 [ 2167.263023] should_failslab+0x5/0x20 [ 2167.263673] __kmalloc+0x72/0x390 [ 2167.264283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2167.265116] alloc_pipe_info+0x1e5/0x590 [ 2167.265773] splice_direct_to_actor+0x774/0x980 [ 2167.266625] ? _cond_resched+0x12/0x80 [ 2167.267825] ? inode_security+0x107/0x140 [ 2167.268975] ? pipe_to_sendpage+0x380/0x380 [ 2167.270148] ? selinux_file_permission+0x92/0x520 [ 2167.271461] ? do_splice_to+0x160/0x160 [ 2167.272550] ? security_file_permission+0x24e/0x570 [ 2167.273928] do_splice_direct+0x1c4/0x290 [ 2167.275049] ? splice_direct_to_actor+0x980/0x980 [ 2167.276362] ? selinux_file_permission+0x92/0x520 [ 2167.277462] ? security_file_permission+0x24e/0x570 [ 2167.278525] vfs_copy_file_range+0x4f8/0x1290 [ 2167.279476] ? generic_file_rw_checks+0x240/0x240 [ 2167.280485] ? __fget_files+0x296/0x4c0 [ 2167.281343] __do_sys_copy_file_range+0x193/0x420 [ 2167.282330] ? vfs_copy_file_range+0x1290/0x1290 [ 2167.283296] ? ksys_write+0x1a9/0x260 [ 2167.284070] ? __ia32_sys_read+0xb0/0xb0 [ 2167.284991] do_syscall_64+0x33/0x40 [ 2167.285847] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.287019] RIP: 0033:0x7febae821b19 [ 2167.287873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.292068] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2167.293703] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2167.295218] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2167.296879] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2167.298532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.300211] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 8) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 4) [ 2167.440931] FAULT_INJECTION: forcing a failure. [ 2167.440931] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.443855] CPU: 1 PID: 11393 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2167.445351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.447121] Call Trace: [ 2167.447667] dump_stack+0x107/0x167 [ 2167.448525] should_fail.cold+0x5/0xa [ 2167.449414] ? fsnotify_add_mark_locked+0x285/0x11b0 [ 2167.450447] should_failslab+0x5/0x20 [ 2167.451306] kmem_cache_alloc+0x5b/0x310 [ 2167.452211] fsnotify_add_mark_locked+0x285/0x11b0 [ 2167.453362] inotify_update_watch+0x55a/0x7a0 [ 2167.454328] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2167.455432] ? __do_sys_inotify_init+0x90/0x90 [ 2167.456508] do_syscall_64+0x33/0x40 [ 2167.457336] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.458388] RIP: 0033:0x7faf32072b19 [ 2167.459198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.463303] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2167.465012] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2167.466546] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2167.468075] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.469531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.471164] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 [ 2167.513567] FAULT_INJECTION: forcing a failure. [ 2167.513567] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.516037] CPU: 0 PID: 11395 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2167.517494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.519210] Call Trace: [ 2167.519773] dump_stack+0x107/0x167 [ 2167.520574] should_fail.cold+0x5/0xa [ 2167.521371] ? create_object.isra.0+0x3a/0xa20 [ 2167.522330] should_failslab+0x5/0x20 [ 2167.523119] kmem_cache_alloc+0x5b/0x310 [ 2167.524076] create_object.isra.0+0x3a/0xa20 [ 2167.525099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2167.526281] __kmalloc+0x16e/0x390 [ 2167.527122] alloc_pipe_info+0x1e5/0x590 [ 2167.528074] splice_direct_to_actor+0x774/0x980 [ 2167.529169] ? _cond_resched+0x12/0x80 [ 2167.530081] ? inode_security+0x107/0x140 [ 2167.531047] ? pipe_to_sendpage+0x380/0x380 [ 2167.532046] ? selinux_file_permission+0x92/0x520 [ 2167.533191] ? do_splice_to+0x160/0x160 [ 2167.534118] ? security_file_permission+0x24e/0x570 [ 2167.535290] do_splice_direct+0x1c4/0x290 [ 2167.536253] ? splice_direct_to_actor+0x980/0x980 [ 2167.537370] ? selinux_file_permission+0x92/0x520 [ 2167.538494] ? security_file_permission+0x24e/0x570 [ 2167.539671] vfs_copy_file_range+0x4f8/0x1290 [ 2167.540752] ? generic_file_rw_checks+0x240/0x240 [ 2167.541809] ? __fget_files+0x296/0x4c0 [ 2167.542682] __do_sys_copy_file_range+0x193/0x420 [ 2167.543686] ? vfs_copy_file_range+0x1290/0x1290 [ 2167.544717] ? ksys_write+0x1a9/0x260 [ 2167.545511] ? __ia32_sys_read+0xb0/0xb0 [ 2167.546505] do_syscall_64+0x33/0x40 [ 2167.547282] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.548352] RIP: 0033:0x7febae821b19 20:21:31 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x42, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 2167.549138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.553033] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2167.554604] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2167.556046] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2167.557524] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2167.558992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.560456] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 5) 20:21:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 9) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2167.670512] FAULT_INJECTION: forcing a failure. [ 2167.670512] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.674872] CPU: 0 PID: 11400 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2167.676434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.678132] Call Trace: [ 2167.678692] dump_stack+0x107/0x167 [ 2167.679453] should_fail.cold+0x5/0xa [ 2167.680255] ? alloc_pipe_info+0x1e5/0x590 [ 2167.681146] should_failslab+0x5/0x20 [ 2167.681938] __kmalloc+0x72/0x390 [ 2167.682676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2167.683745] alloc_pipe_info+0x1e5/0x590 [ 2167.684621] splice_direct_to_actor+0x774/0x980 [ 2167.685598] ? _cond_resched+0x12/0x80 [ 2167.686407] ? inode_security+0x107/0x140 [ 2167.687274] ? pipe_to_sendpage+0x380/0x380 [ 2167.688190] ? selinux_file_permission+0x92/0x520 [ 2167.689211] ? do_splice_to+0x160/0x160 [ 2167.690041] ? security_file_permission+0x24e/0x570 [ 2167.691112] do_splice_direct+0x1c4/0x290 [ 2167.691996] ? splice_direct_to_actor+0x980/0x980 [ 2167.693001] ? selinux_file_permission+0x92/0x520 [ 2167.694026] ? security_file_permission+0x24e/0x570 [ 2167.695102] vfs_copy_file_range+0x4f8/0x1290 [ 2167.696070] ? generic_file_rw_checks+0x240/0x240 [ 2167.697106] ? __fget_files+0x296/0x4c0 [ 2167.698001] __do_sys_copy_file_range+0x193/0x420 [ 2167.699023] ? vfs_copy_file_range+0x1290/0x1290 [ 2167.700006] ? ksys_write+0x1a9/0x260 [ 2167.700839] ? __ia32_sys_read+0xb0/0xb0 [ 2167.701735] do_syscall_64+0x33/0x40 [ 2167.702530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.703600] RIP: 0033:0x7febae821b19 [ 2167.704390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.708168] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2167.709751] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2167.711226] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2167.712713] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2167.714182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.715646] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 [ 2167.749948] FAULT_INJECTION: forcing a failure. [ 2167.749948] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.752803] CPU: 1 PID: 11406 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2167.754211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.755899] Call Trace: [ 2167.756476] dump_stack+0x107/0x167 [ 2167.757225] should_fail.cold+0x5/0xa [ 2167.758015] ? create_object.isra.0+0x3a/0xa20 [ 2167.758954] should_failslab+0x5/0x20 [ 2167.759725] kmem_cache_alloc+0x5b/0x310 [ 2167.760568] create_object.isra.0+0x3a/0xa20 [ 2167.761475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2167.762518] kmem_cache_alloc+0x159/0x310 [ 2167.763381] fsnotify_add_mark_locked+0x285/0x11b0 [ 2167.764410] inotify_update_watch+0x55a/0x7a0 [ 2167.765335] __x64_sys_inotify_add_watch+0x2bf/0x350 [ 2167.766370] ? __do_sys_inotify_init+0x90/0x90 [ 2167.767323] do_syscall_64+0x33/0x40 [ 2167.768094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2167.769178] RIP: 0033:0x7faf32072b19 [ 2167.769936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.773689] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 2167.775230] RAX: ffffffffffffffda RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2167.776705] RDX: 0000000002000003 RSI: 0000000020000040 RDI: 0000000000000004 [ 2167.778151] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.779597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.781055] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:21:32 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24, 0x0, 0x0, 0x0) 20:21:32 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) 20:21:32 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) 20:21:32 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 6) [ 2168.037970] FAULT_INJECTION: forcing a failure. [ 2168.037970] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.040635] CPU: 0 PID: 11421 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2168.042123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2168.043826] Call Trace: [ 2168.044388] dump_stack+0x107/0x167 [ 2168.045133] should_fail.cold+0x5/0xa [ 2168.045919] ? create_object.isra.0+0x3a/0xa20 [ 2168.046848] should_failslab+0x5/0x20 [ 2168.047659] kmem_cache_alloc+0x5b/0x310 [ 2168.048558] create_object.isra.0+0x3a/0xa20 [ 2168.049570] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2168.050750] __kmalloc+0x16e/0x390 [ 2168.051593] alloc_pipe_info+0x1e5/0x590 [ 2168.052559] splice_direct_to_actor+0x774/0x980 [ 2168.053631] ? _cond_resched+0x12/0x80 [ 2168.054528] ? inode_security+0x107/0x140 [ 2168.055480] ? pipe_to_sendpage+0x380/0x380 [ 2168.056474] ? selinux_file_permission+0x92/0x520 [ 2168.057590] ? do_splice_to+0x160/0x160 [ 2168.058505] ? security_file_permission+0x24e/0x570 [ 2168.059588] do_splice_direct+0x1c4/0x290 [ 2168.060454] ? splice_direct_to_actor+0x980/0x980 [ 2168.061439] ? selinux_file_permission+0x92/0x520 [ 2168.062463] ? security_file_permission+0x24e/0x570 [ 2168.063516] vfs_copy_file_range+0x4f8/0x1290 [ 2168.064477] ? generic_file_rw_checks+0x240/0x240 [ 2168.065480] ? __fget_files+0x296/0x4c0 [ 2168.066338] __do_sys_copy_file_range+0x193/0x420 [ 2168.067337] ? vfs_copy_file_range+0x1290/0x1290 [ 2168.068318] ? ksys_write+0x1a9/0x260 [ 2168.069103] ? __ia32_sys_read+0xb0/0xb0 [ 2168.069972] do_syscall_64+0x33/0x40 [ 2168.070741] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2168.071801] RIP: 0033:0x7febae821b19 [ 2168.072584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2168.076334] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2168.077890] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2168.079344] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2168.080820] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2168.082283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2168.083754] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:32 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:32 executing program 2: r0 = syz_io_uring_setup(0x4000021, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000042, 0x1, {0x1}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r5, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3801, &(0x7f00000001c0)={0x0, 0x7a3, 0x4, 0x1, 0xffff, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000400)) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r11}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000440), 0x1, 0x1, 0x0, {0x0, r8}}, 0x3) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4000, @fd=r3, 0x2, &(0x7f0000000300)=""/212, 0xd4, 0x18, 0x0, {0x0, r8}}, 0x8) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000540)={0x0, 0x8, [0xff, 0x10009, 0xfffffffffffffc62, 0xb0], &(0x7f00000004c0)=[0x0]}) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) (fail_nth: 10) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) 20:21:47 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) 20:21:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_io_uring_setup(0x41a6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r2, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000001c0)={0x800, 0x10, [0x2bd, 0xde53, 0x9, 0x10000], &(0x7f0000000180)=[0x0, 0x0]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 7) 20:21:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:21:47 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a, 0x0, 0x0, 0x0) [ 2182.792010] FAULT_INJECTION: forcing a failure. [ 2182.792010] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.794950] CPU: 1 PID: 11437 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2182.796383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.798077] Call Trace: [ 2182.798638] dump_stack+0x107/0x167 [ 2182.799391] should_fail.cold+0x5/0xa [ 2182.800169] ? kvmalloc_node+0x119/0x170 [ 2182.801013] should_failslab+0x5/0x20 [ 2182.801782] __kmalloc_node+0x76/0x420 [ 2182.802595] kvmalloc_node+0x119/0x170 [ 2182.803375] seq_read_iter+0x81c/0x12b0 [ 2182.804181] ? vfs_copy_file_range+0x4f8/0x1290 [ 2182.805140] ? do_syscall_64+0x33/0x40 [ 2182.805931] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2182.807021] ? perf_trace_lock+0xac/0x490 [ 2182.807888] kernfs_fop_read_iter+0x456/0x5f0 [ 2182.808829] ? __fsnotify_parent+0x488/0x9d0 [ 2182.809712] ? iov_iter_pipe+0xf1/0x2a0 [ 2182.810536] generic_file_splice_read+0x455/0x6d0 [ 2182.811538] ? pipe_to_user+0x170/0x170 [ 2182.812359] ? _cond_resched+0x12/0x80 [ 2182.813155] ? avc_policy_seqno+0x9/0x70 [ 2182.813984] ? selinux_file_permission+0x92/0x520 [ 2182.815152] ? lockdep_init_map_type+0x2c7/0x780 [ 2182.816129] ? pipe_to_user+0x170/0x170 [ 2182.816964] do_splice_to+0x10e/0x160 [ 2182.817758] splice_direct_to_actor+0x2fe/0x980 [ 2182.818796] ? pipe_to_sendpage+0x380/0x380 [ 2182.819837] ? do_splice_to+0x160/0x160 [ 2182.820655] ? security_file_permission+0x24e/0x570 [ 2182.821717] do_splice_direct+0x1c4/0x290 [ 2182.822620] ? splice_direct_to_actor+0x980/0x980 [ 2182.822694] FAULT_INJECTION: forcing a failure. [ 2182.822694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2182.823591] ? selinux_file_permission+0x92/0x520 [ 2182.823651] ? security_file_permission+0x24e/0x570 [ 2182.827131] vfs_copy_file_range+0x4f8/0x1290 [ 2182.828072] ? generic_file_rw_checks+0x240/0x240 [ 2182.829079] ? __fget_files+0x296/0x4c0 [ 2182.829928] __do_sys_copy_file_range+0x193/0x420 [ 2182.830907] ? vfs_copy_file_range+0x1290/0x1290 [ 2182.831872] ? ksys_write+0x1a9/0x260 [ 2182.832694] do_syscall_64+0x33/0x40 [ 2182.833467] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2182.834517] RIP: 0033:0x7febae821b19 [ 2182.835282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2182.839044] RSP: 002b:00007febabd97188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2182.840591] RAX: ffffffffffffffda RBX: 00007febae934f60 RCX: 00007febae821b19 [ 2182.842036] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 2182.843486] RBP: 00007febabd971d0 R08: 00000000000000a1 R09: 0000000000000000 [ 2182.844940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.846372] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 [ 2182.847852] CPU: 0 PID: 11446 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2182.848737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.849768] Call Trace: [ 2182.850094] dump_stack+0x107/0x167 [ 2182.850554] should_fail.cold+0x5/0xa [ 2182.851035] _copy_to_user+0x2e/0x180 [ 2182.851523] simple_read_from_buffer+0xcc/0x160 [ 2182.852106] proc_fail_nth_read+0x198/0x230 [ 2182.852638] ? proc_sessionid_read+0x230/0x230 [ 2182.853188] ? security_file_permission+0x24e/0x570 [ 2182.853812] ? perf_trace_initcall_start+0x101/0x380 [ 2182.854437] ? proc_sessionid_read+0x230/0x230 [ 2182.855000] vfs_read+0x228/0x580 [ 2182.855425] ksys_read+0x12d/0x260 [ 2182.855848] ? vfs_write+0xa70/0xa70 [ 2182.856308] do_syscall_64+0x33/0x40 [ 2182.856775] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2182.857397] RIP: 0033:0x7faf3202569c [ 2182.857834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2182.859990] RSP: 002b:00007faf2f5e8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2182.860959] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faf3202569c [ 2182.861834] RDX: 000000000000000f RSI: 00007faf2f5e81e0 RDI: 0000000000000005 [ 2182.862841] RBP: 00007faf2f5e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2182.863708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2182.864594] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 20:21:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) (fail_nth: 8) [ 2183.051065] FAULT_INJECTION: forcing a failure. [ 2183.051065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2183.052581] CPU: 0 PID: 11463 Comm: syz-executor.1 Not tainted 5.10.197 #1 [ 2183.053361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2183.054279] Call Trace: [ 2183.054583] dump_stack+0x107/0x167 [ 2183.054995] should_fail.cold+0x5/0xa [ 2183.055434] _copy_from_user+0x2e/0x1b0 [ 2183.055881] kstrtouint_from_user+0xbd/0x220 [ 2183.056393] ? kstrtou8_from_user+0x210/0x210 [ 2183.056916] ? lock_acquire+0x197/0x470 [ 2183.057358] ? ksys_write+0x12d/0x260 [ 2183.057797] proc_fail_nth_write+0x78/0x220 [ 2183.058299] ? proc_task_getattr+0x1f0/0x1f0 [ 2183.058785] ? __fget_files+0x296/0x4c0 [ 2183.059252] ? proc_task_getattr+0x1f0/0x1f0 [ 2183.059744] vfs_write+0x29a/0xa70 [ 2183.060168] ksys_write+0x12d/0x260 [ 2183.060596] ? __ia32_sys_read+0xb0/0xb0 [ 2183.061096] do_syscall_64+0x33/0x40 [ 2183.061535] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2183.062120] RIP: 0033:0x7febae7d45ff [ 2183.062554] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2183.064615] RSP: 002b:00007febabd97170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2183.065503] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febae7d45ff [ 2183.066308] RDX: 0000000000000001 RSI: 00007febabd971e0 RDI: 0000000000000006 [ 2183.067117] RBP: 00007febabd971d0 R08: 0000000000000000 R09: 0000000000000000 [ 2183.067950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2183.068810] R13: 00007ffeadfb84cf R14: 00007febabd97300 R15: 0000000000022000 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x320, 0x0) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x10) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xa1) 20:21:47 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc00, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:21:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x320) 20:22:04 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x40000000, 0x0, 0x0, 0x0) 20:22:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000002) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r6, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x2003) 20:22:04 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x30, 0x0, 0x0, 0x0) 20:22:04 executing program 2: r0 = syz_io_uring_setup(0x341e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189580, 0x40) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) write$binfmt_aout(r10, &(0x7f0000000340)={{0xcc, 0x0, 0x7, 0x3e5, 0x89, 0x7fffffff, 0x2d4, 0x6}, "8afe013e86403640b84bc3a94a0665ae38aa0d4f674f6a350124f9509961c11a6c45097b3dc0b0cdf8392e35868b7ced9bdeeb2d2367e204fc1d600dbce014c1037d2d002d515300482cbbe35b1294c277e4ea82c0ab4e5435e46586ca64e5513e4fadfc105f44ca81b5b12c704660330f57dffad2d7aa75e0b15b36b7aa6692098362a00177ca484a6d80df567d895fd189ff387cc52e85d4dd9da4e250bed0c9a50b65b8c51e8578c7c6891f2537a1c0b0dd4a1fb8f578145548c511f8400655d583aaa52f804101630b06324e751a6b335ce329b1e8e781189d63af2d4246dc250d2c0506"}, 0x106) ppoll(&(0x7f00000001c0)=[{r4, 0x4000}, {r5, 0x110a}, {r4, 0x6400}, {r6, 0x200}, {r7}], 0x5, &(0x7f0000000240)={r8, r9+10000000}, &(0x7f0000000300)={[0x5]}, 0x8) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r11, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xbfff, 0x0, 0x0, 0x0) 20:22:04 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000, 0x0, 0x0, 0x0) 20:22:04 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1200, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x8008) 20:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xa100) 20:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xff0f) 20:22:04 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1800, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:04 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r6, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="82340103b5397de0d0c509394b13832a1d46d9e61b60772aaeced1289b78727ea00c9a3be654380420095ba627b09b58968303a13753b216dc427756bded1fbb9ad515e944ab30d6eda5b886bed8ba7b272a4dcb20244de1f8035975fbbb45f9222e98127216fc784bd2dacd60ebae68f56dee0eaa1382e3b6f015e5b5c2484efee5e3de5e6ea841ff40b183e0138d9ab73cd774412d2635bfa62f7f5a19204778b0fd5ecab09e46", 0xa8, 0x40, 0x1}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x100000) 20:22:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x8800000) 20:22:05 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x42000000, 0x0, 0x0, 0x0) 20:22:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001580)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r7, 0x0, &(0x7f0000001540)={&(0x7f0000000380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000001e00)=""/4102, 0x1006}, {&(0x7f0000001700)=""/155, 0x9b}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000004c0)=""/160, 0xa0}], 0x5, &(0x7f0000000140)=""/25, 0x19}, 0x0, 0x40010000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x10000000) 20:22:21 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2, 0x0, 0x0) 20:22:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r3, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r3, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x5, 0x0, r3, &(0x7f0000000340), &(0x7f0000000140)='./file1\x00', 0x2, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0x2, 0x4) 20:22:21 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x36, 0x0, 0x0, 0x0) 20:22:21 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:21 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) 20:22:21 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:22 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000007, 0x80010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x6, 0x10001, &(0x7f0000000040)=[{&(0x7f00000001c0)="3f99901a2765033cab1a7b4c49700350ff22f030b63b09c10507833d5e77f4fa629803faece2115e2eb60b7cb9055ebbd572f606ed75f9e3aae7119201c60f9574c7549dba623c53448a64b5a9478ecb7db8091dae478c7a579afa66bd2d48e58b23d7f79e3f1478ee9b2208647ca710d63cc739ad36eeadf03a80773a9ce9b66a2e5982cbf46f441fde77ec1d7b026f06f5c17b0a782491ab2587521c6966f9175b93bfef201db5ef414cd38c", 0xad}, {&(0x7f0000000300)="6cd626a467bbc1a24c07462f899387b22f02444695596a010337891d3d61c617e92d6f707aa0ff9608ba799cb626481769ad431ff5a380ef34fba33c84f9c641eb0f15b854ab2bb1a050fdffcb5e62be580705f19ddd89b00c6bf0abcb5f5a068b2ac7b381096aff590c27382c5e3106ce2c231d82093b51edc0ebde4ff33a6bdf4d1bc4a63b374742933cd6e09e579c0a836f066531407a995b1382d861f91eec54c2267464d71c059fc11b6010d9974fe0590a947990d7e7d77a50e3478d196f8b5c54bdccc4e8558c400558234d70b6e2a280", 0xd4}, {&(0x7f0000000400)="6774b6c49f9d723daa664779793bc16c849a68a388e55d8158448aa066aa8ab926f5b62bbaa19183d12d733ebc70d7079fce8ca5fb00cf3196f97a022caaba22b4e304f3a0c6f5325755a5d4a06a2d73d76df8c7f017fc5d6245bda3df9c287c4747b9e4eaf83eb902c28d725837a705c87cf8879a7bf80d68452296d107f7f53de958653e1203c958c0260e4ffd4c381b1e7236d1ace167057b08c34c71b153b5250e55ff9abac9dd0b67e1905db9f2734cdf3e7ff658343c3130", 0xbb}], 0x3, 0x1a, 0x1, {0x2, r4}}, 0xd0f) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x20d315) syz_io_uring_setup(0x7d6c, &(0x7f0000000500)={0x0, 0xaf3a, 0x8, 0x3, 0x2d7, 0x0, r8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x20030000) 20:22:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_uring_enter(r7, 0x5118, 0x7045, 0x1, &(0x7f0000000180)={[0x4]}, 0x8) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001940)='./file0\x00', 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xa1000000) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xff0f0000) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xffffff7f) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x800800000000) 20:22:22 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2400, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:22 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000300)={0x0, 0x20000, 0x1, [0xba, 0x8, 0x3, 0x3, 0x2bea], [0x5, 0x3, 0xfff, 0xee4f, 0x9, 0x1ff, 0xa140, 0xc08, 0x200, 0x1, 0x100000000, 0x7fff, 0x1cb, 0x3, 0x988e, 0x80000000, 0x6, 0x1, 0x8, 0xf0f000000, 0x0, 0x75d, 0x4, 0x2, 0x8, 0x40000000000000, 0x40, 0x6, 0x2, 0xfff, 0x8, 0x7, 0x7fffffff, 0x3, 0x215d, 0x2, 0x93, 0x8, 0x101, 0x6, 0x8, 0x6, 0x8, 0x100000001, 0x4, 0x67fb, 0x5, 0x1000, 0x5, 0x0, 0x1, 0xf55a, 0xfff, 0xffffffffffffffff, 0xffffffffffffff81, 0x0, 0x80, 0x200, 0x6, 0x1, 0x0, 0x5, 0x6, 0x7, 0x7f, 0x7, 0xb7fb, 0x7, 0x7f, 0x6685b393, 0xfffffffffffffffa, 0x40, 0x40, 0xffffffffffffffff, 0x1, 0xf8000000000, 0x320, 0x4, 0x7fff, 0x101, 0x0, 0x7fffffff, 0x100000000, 0x401, 0xffffffffffffffe1, 0xfffffffffffff000, 0x1, 0x30, 0x40, 0x3, 0xbd, 0x3f, 0x200, 0x0, 0x4, 0x85, 0x1000, 0x7ff, 0xcf, 0x1f, 0x7, 0x21, 0xaeb, 0x2, 0x2, 0xdc3, 0x7, 0xffff, 0x2, 0x4, 0x2, 0x0, 0xffffffffffff8001, 0x1f, 0xfffffffffffffffe, 0x7, 0x1, 0x5, 0x100000000000, 0xffffffffffff8000, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000740)={0x0, 0x1, {0x9, @struct={0x7f9f, 0x3ff}, r6, 0x10000, 0xffff, 0x7, 0x6, 0x8, 0x8, @struct={0x7, 0x800}, 0x80, 0x5, [0x101, 0x20, 0x3, 0x2, 0x5, 0x6c78b47c]}, {0x2, @struct={0x1, 0x2}, 0x0, 0xb76, 0x3ff, 0x100000001, 0x3, 0x20, 0x1, @struct={0x269, 0x20}, 0x3f9, 0x10001, [0xffff, 0x8001, 0x100000000, 0x200, 0xff, 0x5]}, {0x5, @usage=0x1, 0x0, 0x5, 0x0, 0x2, 0x7, 0x7, 0x880, @usage=0x6, 0xfffffeff, 0x7fff, [0x24, 0x80000000000, 0xe4, 0x7fff, 0x7, 0x1]}, {0x1ff, 0x8, 0x4}}) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1/../file0\x00', 0x1800, 0x4, &(0x7f0000000d80)=[{&(0x7f0000000200)="60d95193db6203bc87ec7306552524916769dcdbda528c6827b3f58f5f915423e1a3685550dfe557bc9106", 0x2b, 0x3}, {&(0x7f0000000b40)="d1085032417d0f03031367127d7b0884af687531c71c1b19f3088e674eb9cd25e5a10f95089c7c863551e4ace4db950dd2ffe6b62fba6e745abb0055bc08ab009acfe240eb29af7a716a8ad3d009065e9cb178bada5bf56b737d749d1f0e55fed3da23e5aec191", 0x67, 0x4}, {&(0x7f0000000bc0)="db4da543429e974f33925af1206641147561ed42e45df6fd8175defa20c5b2697893b5175c112ba928deed8505b9078f9255491458db76c97226a5c14f458fcc2d32031893317fa13deda6453589d74bf4f2fc823406084696768636ea5a1633daadade9540d685d6612effcdd3b8ce6c4d6819108d40071757da59a46d91c234ef9", 0x82, 0x101}, {&(0x7f0000000c80)="13168ea443c4ae5536f9703a9f60005e949722f0363a1e4a6fa8dfdb7852440d40e392c472b023bc23ab1d049c35d130fe621fb270950155d7301a4238f40da17ffe544744f8f2927b30d5fa368bd773ea1ce9e1a5dfcc3ae1821843c8110a0736cde55e53f00a85edd4555c2fe83109c4d7798dc39b8937d30ae9ba1ef628b1e903543b23637141f2cc7e6db26e546ad0035c281c629fd3c0ccd8165b0b36fce6416a13ef20b5411d50215cacf0f499907cd7ee63b606b250b1e1bf78e5e893cf2b1f790449", 0xc6, 0x6}], 0xcc040, &(0x7f0000000e80)={[{@huge_within_size}, {@uid={'uid', 0x3d, r7}}], [{@subj_user={'subj_user', 0x3d, '@#'}}]}) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x10000000000000) 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x1000000000000000) 20:22:37 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) 20:22:37 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6, 0x0, 0x0) 20:22:37 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000004000008000000d2c201", 0x63, 0x400}, {&(0x7f0000000040)="000000000500009452b92bee02bdf3c35e00c7b2a40200d64a6eb434652eb677bb", 0x21, 0x4e0}], 0x0, &(0x7f0000013800)) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f0000000100000018000800", @ANYRES32=0xffffffffffffffff, @ANYBLOB="f8c76570ba8b914894f02f66696c6531"]) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x80000000, 0x0, 0x1, {0x0, r7, r8}}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001000000de5bc5530390808100000018000000", @ANYRES32=r9, @ANYBLOB='g\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:37 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:37 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) inotify_add_watch(r6, &(0x7f0000000180)='./file1\x00', 0x0) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:37 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c, 0x0, 0x0, 0x0) 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x2003000000000000) [ 2232.915733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2232.918072] EXT4-fs (loop2): unsupported descriptor size 30646 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xa100000000000000) 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xff0f000000000000) 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xffffff7f00000000) 20:22:37 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:37 executing program 2: r0 = syz_io_uring_setup(0x707c, &(0x7f0000000080)={0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x101, 0x3, &(0x7f0000000180)="e6ab04945b887679b2f605ab129cceabc50f0c0572010b3aae53557725257ef9165f32", 0x0, 0x0, 0x1, {0x3}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) fcntl$notify(r4, 0x402, 0x32) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) fcntl$notify(r5, 0x402, 0x80000008) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)={0x0, 0xfb, 0xbd, 0x5, 0x3, "51a3a21b6e67344c3111a3bb4cbcfff2", "63c5a5d44d01840947c1ca6a2658c923e5611c54e022aaf421819a061cf0edf0d0fae05a7594c5772719ccfdc2cf3a76e4cc310aa10cdb89c51e977f802561707109a40442fc0a7aa23dc3e844490ef29460a176a61046d8be895455354be8485d52d54eb7036f50753d960f9c2149fe8ccd60ee2a0807f1288993ae534b1a2c56ed7b3258831f5000377fbadf9746e084baa0c28e56785428415bba4c608fa556ebbd8bf9ee2c05"}, 0xbd, 0x2) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, 0x0, 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010002000000000000000b68", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653100"]) openat(r7, &(0x7f0000000200)='./file1\x00', 0x0, 0x82) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0xffffffff00000000) 20:22:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xef, 0x1, 0x3b, 0x40, 0x0, 0x5, 0x1008, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000004c0), 0x3}, 0x4, 0x7f, 0x7fffffff, 0x9, 0x4, 0x7, 0x80, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x40, 0x2, 0x0, 0xbcf0, 0xe00, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x802, 0x6, 0x3, 0x5, 0x8, 0x7, 0x20, 0x0, 0x3}, 0x0, 0x9, r0, 0xa) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r2) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x800) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) readv(r5, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/13, 0xd}], 0x1) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r6 = epoll_create1(0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000a00)={0x100000001, {0x24, 0x5, 0x3, 0x1f, 0xb8}}) perf_event_open(&(0x7f0000000b40)={0x3, 0x80, 0x1, 0x2, 0xdc, 0x80, 0x0, 0x7, 0xc0100, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1ff, 0x4, @perf_config_ext={0x6, 0x3a}, 0x208, 0x140, 0xc7c, 0x3, 0xa, 0x3ff, 0x800, 0x0, 0xf1b, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0xa) write$P9_RREMOVE(r1, &(0x7f0000000b00)={0x7, 0x7b, 0x1}, 0x7) recvmsg$unix(r1, &(0x7f0000000080)={&(0x7f00000001c0), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000a40)=""/192, 0xc0}, {&(0x7f0000000580)=""/219, 0xdb}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002820366", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x110}, 0x40000102) 20:22:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FIONCLEX(r7, 0x5450) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000340)={@id, 0x21, 0x0, '\x00', @c}) 20:22:38 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) 20:22:38 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc, 0x0, 0x0) 20:22:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = dup2(r0, 0xffffffffffffffff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xec, 0x1, 0x9, 0x1, 0x0, 0x3ff, 0x40514, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fffffff, 0x1}, 0x8, 0xffffffffffff6ba9, 0x6de1, 0x2, 0x80, 0x9, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) openat(r6, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:22:53 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3600, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:22:53 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:53 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x42, 0x0, 0x0, 0x0) 20:22:53 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12, 0x0, 0x0) 20:22:53 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) 20:22:53 executing program 2: r0 = syz_io_uring_setup(0x3c23, &(0x7f0000000300)={0x0, 0x14bd3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r6, r8, 0x0, 0x20d315) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00') mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) 20:22:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffffffffffffe, 0x0) 20:22:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r5, 0x2, 0x0, 0x200}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20d315) io_uring_enter(0xffffffffffffffff, 0x10c, 0xab4b, 0x1, &(0x7f0000000140)={[0x7]}, 0x8) 20:22:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/lockdep', 0xa8800, 0x100) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:22:53 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000a00), 0x9cf, 0x41a040) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) r8 = accept4$unix(r4, 0x0, &(0x7f0000000a40), 0x80800) r9 = accept4(r4, &(0x7f0000000a80)=@can, &(0x7f0000000b00)=0x80, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) r11 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r11, 0x4c00, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)="896e7dfd376f9aa86be630f9ab8187152cec5eebdcb1eea97f4743eb0f25d6b38fce72558f4c124310ca4727771846095b326a7fd6d33af6e39376cb2cbce4fddb4fb18ad8bfc8d5eb49b9160054502bde1fa39957262bd7d0c804b868bf7f8bea1ee218fdd7f305b9016fdc691d652c7eeca30bfd4ee4d853d30f11cb159fe8f9b8f29dcd7648f6bf63e42e94305acd93d7aa26b7788b82e8b7a4da5787cd65d3eda7c79dee6b746079eaf3bddbc09150183c55de475863f4256774f518456c5257d140760578742f71eb20c335dc2cc4837fb4bc358da9c760e55e3e49af", 0xdf}, {&(0x7f0000000400)="ca823ea6ef600643433ff9cc1e1ba4270dbac408c9b6cdf037ed7b8979d09c7b7f9752d6fb47e7d87e9c6b3349ac94dea21386c5e60f8f94a0169bb880d25ff89bff222c226d3d39031678e3b944ac4da9476ea178d3866f28af8b3032996c53bb5d94a8ebae1489bb43b569eaac6e129ef95ec7f1d280fbd976c00233d6154a3d29e33659a8dd550c70396b", 0x8c}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="3619dbd1dfd8f020411c95101fc5bf71361a82abd6ca6c32f8d2217f8e74c29044074c8c4687deeb683d2edb2d422a3658060c341007d549ff3d29148961ee2b35c99bb4326f9ddfd86ef2bba51dd19ecc8f32ba769ebbb1cab6164813bd2c8b96a6b84aeda97e3d59594202ddf17ab02d6590", 0x73}, {&(0x7f0000000640)="f8bb4822d11f50f3e789d4914463c6b04edef1b66d5c231773405deb77528d3100a9c842fc03969eaf4e654e57f6cd47f8a23dd6b70ca830229f24dcb3e20bf855f844fbc71df1b717b6a42b77d27c1140007984bf83587569fe0a5fe4f93156e9a85a9feb55204b9ee2d10290facd55f33729d056d95a72465ce8875a40fd171684ff824c595ddd51bc00969a5008fff159c7903d791a77595e725846fd3f1d12f337baff4e54", 0xa7}, {&(0x7f0000000700)="b9a5bcfb7e5d3995e283025319fac77eeed8af383b5b109a2e1da718879b54c830b7cdfd079102afc0bf405deb9eac2b5518fff55d0fc5aa4f11da27aba4fd5cd46522ec5c626f16ba033b2fd939825d04e8f65d9562468fb05088a9dc62bfa9fc999faccd419035", 0x68}, {&(0x7f0000000780)="55edd98f59fe5eebe339a1d054112cd0a00fdfcc059b245c5c0dcf1f4da3ac2a3a437e2958b8cb63ada1fb8f85cfa0caaecf67c0baba1b979b77e312e299087f272dd065f1827d6e3f69b6289fe60842030af10ab687f177b680f12b6ec99da439eb335c0ef16f6be3cd081ed3d6f10d33a52856ac0a521e23240a3b4e174047", 0x80}, {&(0x7f0000000800)="cdc0fe456ae530231a37d09be59a564efe799c7d2996a4a438b8136ebfa5c528e250f0eabb44fd7e998f63430ed81ff64afc02328edf7641bd27b23ecef08ca288649e99af3d5bc041f734b80758beae12e24530eadfce4d3006c6e421f9ed6a1634765710f9b7c99567e8dc83c9a39bc9c66450753ce4744daecddf2bb6ec069917b008ceb0b3a38a8f73ba2009b7dc05c523", 0x93}, {&(0x7f0000000240)="52d680a9c203e876bee17d9995ceded3fbc880ea03baf53df7700abfff71", 0x1e}, {&(0x7f00000008c0)="2039e8de12a2a89f4a17ee1f4a5c4942709e5b056b27d01b15593983c7e134f0b7941a555465651b7d3167a1ff4404e7809bf4b1c5a13ad89a81c25c4865392bc5aa5ca98dfeb663c7c87a89be352a1c7903804ade5d", 0x56}], 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000001000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="f6000000240000000000000001000000efff0000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r11], 0xa0, 0x20008004}, 0x4000000) 20:22:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 20:22:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xfffffffeffffffff, r0, 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r4 = syz_io_uring_setup(0x3ac4, &(0x7f0000000140)={0x0, 0xd30e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r3) ioctl$FIOCLEX(r7, 0x5451) close(r7) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r7, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:22:54 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:22:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x5d6, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x4, 0x3, 0x80}) 20:23:09 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:09 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x600, 0x0, 0x0, 0x0) 20:23:09 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) 20:23:09 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x18, 0x0, 0x0) 20:23:09 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x30, r0, 0x10000000) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) syz_io_uring_submit(r1, r3, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="a06ac0e9af16409c399d607e7a9e141f376686802e27c41b24565cd16ffffcaa51b0f888477c8fd9cbd31a0736618817414c512771f69eee5a21a682804329fbd2a1d1e8a038d16d63b16a345dcc6a09dd9b8f9981408b7c2695f225f7b9f113a0d09cdd52cd1215de1205827ce6938d82411cc047ef0f2ded3acffdc556cd0e2c977f3b77ccfbde3597587ea18d38c15f4691ce8f373d0595ed74bd0aaa804902e5", 0xa2}, {&(0x7f0000000200)="896b26b1f053138b1c82d3463bb52be65839bc4d7d24bf04df351ab1a5099ae35bf62171386b6d3a702fe77d3cefd0ecf337cf6e88128eae7d475608cad504c6614350872b41d6a61838604367efb90f70d1cc617f20f436731e86f31cb350c8595cd1b93cf45c78cfe0133dc45dac8c4e1049eb55ab4532", 0x78}], 0x2, 0x0, 0x0, {0x1}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r6, &(0x7f00000001c0), r5, 0x3, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x100a1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pata_sch', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:23:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x2, 0x9) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x20, 0x2, 0x2}, 0x7}}, 0x18) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:23:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x6}) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) clone3(&(0x7f0000000300)={0x70030000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x28}, &(0x7f00000001c0)=""/59, 0x3b, &(0x7f0000000200)=""/138, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r2}}, 0x58) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYBLOB="00fbc800021d4965e291805a1feb7b184e9a831a4143f5f6ab0785cd3b7b4c2818fde8df2ee879d5cf8a5ac00d7cff992cebe01c1bd6fa2e4a8f765108c59a101fc13a02c7ec168a44041e73d514a8eb24f68d503effb7cb4e7afeda8f365a4741d55ab05e64200ece460e8aebe9d4899e8a986860cfb677b610500f90ac32971cf04d1c7f3fbb3894698ce44bcf00000000649481b52fb1e1ee2515918a2ff0ed564a3fe593b6fe683a383f8ddd525b2646e67d0954ac3689f1088bd265a0b1118a2696bd36a83f"], 0xc8, 0x0) 20:23:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) writev(r0, 0xfffffffffffffffe, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) mkdirat(r4, &(0x7f0000000040)='./file1\x00', 0x1a5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x1, 0x0, {0x0, r5}}, 0x7) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x9, 0x2, 0x3}) 20:23:26 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) 20:23:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, 0x1}, 0x8001) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) accept4(r7, &(0x7f0000001640)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e, 0x0, 0x0) 20:23:26 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x10) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) 20:23:26 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:26 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc00, 0x0, 0x0, 0x0) 20:23:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000140)={0x1, 0x31, @start={0x0, 0x0, "638519e5db49952b19b1f9939b4659005f248dd354204e4f7b7961a12f49c94b97a8ae42ddf4e4a732f650ebf89bd25d3fa9e59184c33c0fa567358ea2458c87f349762e8d285c6148079177a045ec2a118d70dd65f47d553695cb9b3fe83858b8c78b07cabc59059cd15abe0899a66e99706ee5c3d1152b62edbf50322b80b8c02428739c6c880e51ee108d07a9004350565aac2456faeb65ca3cfc492de219d4b61dbf143aadbdea85da73211dae8782643b55d96554799b7167f337d16cf5ac0dccbcd6726ce6e0705b59434c62d8fb7f691bbc23192b9e8a974efb1ff712be401b2a49f00cde5591f81e5d80015eedd23dd10541771735a3826daac91b8adf0a89fc5ca1fe2ee21084d0b9cefa3be3cee4ea5d1d00d4660c1e7d08272691f36d85c8454b2d5d42473e79140993f04f2b2768d0cbe974abf72e105e2bfb633fc151376450de14465f438a63922ec4e34f27296e2e94a492ea62b6ad0702718ebb2bb2db501e8152a8b783f5fe1286d1158dcd4c2151121c38f7ad91bc223432b8e6c22572cb97514ba677c1b7a768d3fc99b34c6ef81b83989be7fa7cdaa9884c718b97a4f60b653f335a4bebb912fff926e8d2687286d3c19860addbea3ebd0134a2faf1635bc94901e115e2806e0fd80891263067235cc3f9d6c07da7f9409090631975110c949fa1b9ce2eca13345fb53ddcaff6be7c0804cc250d4832ac5da1d9e015b1cd3fd4f28b0368556c724cfc8be5a0c2782914a691f2123cd8e577ff82fde7c7abf3b0c092fd9239b13b82d24bfda860a7a85fc88dc25c9a9c4955833b31c8d838316bb82e03e70043d3043674fdf3e329315585640a9a27924afd350373045aad568c7dfdfd070761961c8e7fd22aa099fab349e6ccbe4aaa2e80576ac231c883086c23ef48641961dd18496b85628170ff86da49bc4d3f9bb24a2a26dba9d04023140f3c2de6a6eb37f829d78015fa2ca030da7343844372da8a01f1a52c6e0e582e80a0f9544a84ae2be7f8730f1cc6498899330d959a4093384ca4fdaf3eb9126d50017fc1c0f7509b3db4b9136177d6d19bebe6b1489fca511fca77896de044567c25e9d495ca97e8b37a3f348e4c3ea6c7295d6f5e02793e08d2fe5187a2e8856deade55ea37574e93bba5161366358bfebcb1f5a5f7f156ad1c3b0a86b639a07d250ec4ba886f8727897da9e00edcb4d962f81e71df4e5c019315fc21c539b6253f3304d60b602ee7932074d9c1ba750986252398fbcf1ce5d3cb0087e2e1392c5eef60ae99d556e92836aba6747b367d821b44c859232e4fadbc6477c8d042113ddceb1222ebda749955704d622a85cabd432f5735a662aa05289f974cd557b3cf72560a158767584e13f73e8a474fdb125d1c887d3c95ed0c6a3ea76e12ef005aebb4fe6e3d2ceb9812f5cbc251ad544a7d596a4844", "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"}, [0x80000001, 0x1a8, 0x8, 0x80, 0xfffffffffffffffc, 0xedcc, 0x2, 0x3, 0x3, 0x0, 0xffffffff, 0x0, 0x2, 0x7, 0x4, 0xfffffffffffffff7, 0x7, 0xffffffff, 0x1, 0x2, 0xff, 0x800, 0x0, 0x7, 0x4, 0xfffffffffffffff8, 0x100000001, 0xca09, 0x9, 0x401, 0x23d3, 0x1ff, 0xfffffffffffffffc, 0x100, 0x1f, 0x4, 0xffffffff, 0x10000, 0x3, 0x100000001, 0x5, 0x8, 0x4, 0x2, 0x5, 0x0, 0x40, 0x2, 0x5, 0x1, 0xe5, 0x1, 0x80, 0x0, 0x10001, 0xa4a9, 0x8, 0x401, 0x3, 0x3, 0x7fff, 0x6, 0x7, 0x4]}) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0xa1, 0x0) 20:23:26 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_uring_enter(r0, 0x5d4d, 0xc864, 0x0, &(0x7f00000001c0)={[0x2d]}, 0x8) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xffff, 0xfe00, 0xed, 0x2, 0x3}) 20:23:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x96000, 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x0) 20:23:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20d315) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1}, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x0) 20:23:26 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4200, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:26 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000001, 0x40010, r3, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x4, 0xfffffffffffffffe, {0x0, r0}, 0x8, 0x1, 0x1, {0x0, r6, r7}}, 0xe2) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r3, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) 20:23:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x1e4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001640)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x39c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x44881) io_setup(0x5, &(0x7f0000000700)=0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') ftruncate(r1, 0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r5 = dup2(r0, r2) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x4, r5, &(0x7f0000000140)="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", 0x1000, 0x93e, 0x0, 0x0, r1}]) io_setup(0x0, &(0x7f0000001680)=0x0) io_cancel(r6, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f00000016c0)="d027c85831bf1cc66e9478a5620a890686d7c5735768da060e112c237fe274c073da8ec9204c8d216b646f6ef66b25b4344c0ba1b60d50a3d84d0a81bd216b0a870bbdfb992d09e2f439a6e25955ef349f1311865d03e395a88e455bb1", 0x5d, 0x6}, &(0x7f0000001780)) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000001140), 0x6, 0x10400) dup2(r2, r7) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) copy_file_range(r4, &(0x7f0000001180)=0x7f, r4, &(0x7f00000011c0)=0x40, 0x9, 0x0) 20:23:40 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:40 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x65cc}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:40 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4200, 0x0, 0x0, 0x0) 20:23:40 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000140)={0x4, 0x2, 0xcb}) fremovexattr(r2, &(0x7f0000000040)=@known='trusted.overlay.origin\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:23:40 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x24, 0x0, 0x0) 20:23:40 executing program 2: r0 = syz_io_uring_setup(0xfb, &(0x7f0000000080)={0x0, 0x50ab, 0x10, 0xfffffffc, 0x23d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000028c0)=0x0, &(0x7f0000002880)=0x0) clock_gettime(0x0, &(0x7f0000000180)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/75, 0x4b}, {&(0x7f0000000700)=""/215, 0xd7}], 0x4, &(0x7f0000000840)=""/4096, 0x1000}, 0x0, 0x40000000, 0x1}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x20d315) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r4, &(0x7f0000002980)=0x80, &(0x7f00000029c0)=@qipcrtr, 0x0, 0x400, 0x1}, 0x8000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd_index=0x7, 0xfffffffffffffff7, &(0x7f0000001880)="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", 0x1000, 0x2, 0x1}, 0x7b6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xa7e2, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) write(r8, &(0x7f00000001c0)="53bb75fdf5a55045138724f6148fae752373c043ef53d13837c1789bf4eed4951c11391e30266554a62b5c9c9f9a5a26e94b506b281623a05c13612907d814fb8f282e30cdd72af3a2395c4874de07d37801be52e79c7c1438571ace9afc4905935fe2203c65a0c7ff45d403168ff345", 0x70) 20:23:40 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1200, 0x0, 0x0, 0x0) 20:23:40 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x31, 0x80101) fcntl$dupfd(r0, 0x406, r2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2) 20:23:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_out(r2, 0x0, &(0x7f0000000080)) 20:23:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/iommu_groups', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:23:41 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfdf1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb2, 0x8, 0x0, 0x29, 0x0, 0x5, 0x10, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x401, 0x3}, 0x40841, 0xdb26, 0x7, 0x0, 0x401, 0x8, 0xb697, 0x0, 0x6, 0x0, 0x1}, r2, 0xc, r1, 0x3) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:23:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendfile(r2, r2, &(0x7f00000001c0)=0x3ff, 0xfffffffeffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000140)={0x7fff, 0x7}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x80, 0x40, 0x9, 0x0, 0x1, 0x22, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x240, 0xfffffffffffffffe, 0xb4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x6, 0x0, 0x3cec}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x7, 0x47, 0x40, 0x3, 0x0, 0x8, 0x20802, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000200)}, 0x2000, 0x8, 0x200, 0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, 0x5}, r5, 0xf, 0xffffffffffffffff, 0xa) fdatasync(r4) 20:23:56 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) syz_io_uring_setup(0x51fd, &(0x7f00000001c0)={0x0, 0xf974, 0x1, 0x7f, 0x1b3, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:56 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:23:56 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000000, 0x0, 0x0, 0x0) 20:23:56 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a, 0x0, 0x0) 20:23:56 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:56 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1800, 0x0, 0x0, 0x0) 20:23:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r1, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:23:56 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:23:56 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000040)=""/2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:23:56 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:12 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:24:12 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e00, 0x0, 0x0, 0x0) 20:24:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000f, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x401) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x210000, 0x0) clock_gettime(0x0, &(0x7f0000000180)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0xffffffff80000000, 0x5, &(0x7f0000000540)=[{&(0x7f00000008c0)="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", 0x12b, 0x3}, {&(0x7f0000000240)="0ead53c53689cab1b447051678391869a804a3bc8d057d8433b086e5d94c6858e9f240081f30ff318d124d32188e455d3f01241ce428240d96ffdda44960ecadcd2a83ce5c5fa8253a17bc57a8594460e3143494e0c47d94a0a7d05407db24e28456d8e9e044a033d8651940e9cacf604bbc6b28e7e836fe3f1f552c3ee9d622009b8cfbf5255df41c0098b1f022482ab5d2ef27af292837b57aeccb21da8d34a57cfa816759b460d0d22a5228ef3ead3e4af929bb67fd29bc005463fd3d2de57cc9263545cf1c0a7b5d7d528a9b6ccbc93cc6eb49c2f4f69af7aad074c88f4982ba4d245409ddf9333f57e5579aa7", 0xef, 0x88}, {&(0x7f0000000340)="5431a35bc679ece5201703f1735a8f48d6269c3aada33b3532443ce6c33da7172f18203067a07f96314df3719e972cd34f368a9e7c4aef008058ffebfa84bba9343bf3253706f173ef631841019ee04e459ddf8689c2a76276d3cd6d250ae891c471ea0ad93a18362def6c545c9788f9515fce9abb83d4d3d6720e1c7cd691d2819518d323bf0c1b9ae3165d9aa2f3b262ada8cf910cc4963d832cfc5de7917852cc133584ff8c639e10ae43e6d3b67dc1c52136a9a9126cdb6b98f58105ff76ff61880b9d585a985bdd76d8d42377d409de5f1e5eb01f65237d7a566595efad69528d5f9b2e1282b435d5", 0xeb, 0x1}, {&(0x7f0000000440)="b5f0f5d845e95025c899b1239119ef363f05489bcb8490a2509ba308d737dac56f90e37b9d18399694b1cbc829cddef3637a485a347c03d4c8851590004df5b91fba9c47652be574859f8118b3b5e74b42196ed8e1b8855559a98598d61ad5e6b87cbfad5c3d5f8f23e22d45370db6947320b1b610ca9803f6efbb9cd8c9876343f1a3c03bd0abfa5ad91cbcaa", 0x8d, 0x8c}, {&(0x7f0000000500)="7b2e4c7c071fe5cfc83061691c4b1dbe00fa86bfaf89b2", 0x17, 0x8}], 0x2084492, &(0x7f00000005c0)={[{@sysvgroups}, {@nobh}, {@barrier}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000780)=ANY=[@ANYBLOB="0108000006000000183400007e7cf982f5bc6b18267db287e5c5ad4b0a4dc45f082c9ad7029d766044c44d7f66b1bc4725a61f698fd0461296fa674d97bc7caf88aa1d6a82af031e01b250397e6298b5580a9a3fe5eae99108d07a9fcc7995d9ca7a759b5fa462dfc45f2ed2e9b32a036cd4486437ae55e3fa4cb15b419d06ebb5f9f9ef03c387d50d2f424a9286ad6cf23476c1f2d6245c16c60275b208253c5bd8f4ff3752dc0baf36000198660ef52792c6dbb4d7e031658d2e76934497d03d7a1afcf7a7ff8d5fe4270126905ebab6f22cd6ade6a16209d1d0d04fcbf4bb6df3ecc530e28852896b24a100b4be84649b", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) copy_file_range(r2, 0x0, r4, 0x0, 0xa1, 0x0) 20:24:12 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) 20:24:12 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x2c) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x8001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r3, 0x5451) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r3, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:12 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x30, 0x0, 0x0) 20:24:12 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:12 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:12 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x80, 0xaf5e, 0x3, 0x6}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:24:13 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000440)={0x0, 0x4fae, 0x4, 0x200002, 0x1bd}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x381d, &(0x7f0000000340)={0x0, 0x327f, 0x20, 0x3, 0x1cb}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000400)) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) r7 = openat(r4, &(0x7f0000000000)='./file1\x00', 0x600, 0x12) copy_file_range(r7, 0x0, r3, 0x0, 0x10001, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) sendfile(r8, r7, &(0x7f0000000240)=0x3, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x80, 0x9, 0x4, 0x1, 0x0, 0x2000000000000000, 0x4211, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x1000, 0xe0}, 0x400, 0x5, 0x2, 0x7, 0x1, 0x5, 0x5, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x2) sendfile(r3, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:13 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x408}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) creat(&(0x7f0000000180)='./file0\x00', 0x4) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4, @fd=r6, 0x5, 0x0, 0x0, 0x32, 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r0, 0x5451) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x1}, 0x0) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x3c2f, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) fadvise64(r2, 0x1, 0x20000000, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0104000001004800002f000000e663987ad6f9ecfe30ad8853d83c2e31155b2fccdf8e7c4abaf30135481d62a19a7df4162c199902be0c271b8fad539828692f623218e0490788e502d4", @ANYRES32=r1, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x7, 0x4, 0x20, 0x0, 0x1f, 0x40900, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x400, 0x1, 0x3, 0x3, 0x9, 0x7f, 0xffff, 0x0, 0x7, 0x0, 0x6ba}, 0xffffffffffffffff, 0x0, r3, 0x2) 20:24:13 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0xfffffffe}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x8003, 0x108, 0xb}, &(0x7f0000000340)='./file1\x00', 0x18, 0x0, 0x23456}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x81, 0x40, 0x20, 0xff, 0x0, 0x100000000, 0x12, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x84, 0x3}, 0x5a002, 0x80000001, 0x7fff, 0x8, 0xfffffffffffeffff, 0x5, 0x2, 0x0, 0x100, 0x0, 0x10001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x595142, 0x78) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 20:24:29 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x36, 0x0, 0x0) 20:24:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x204c1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d315) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000024c0)={'team0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000000)={@local, r5}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000000280)=ANY=[@ANYBLOB="64050000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="7c00028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000008000100", @ANYRES32=r6, @ANYBLOB="f80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004002b07000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="900002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0102803c00010024000100757365725f6c696e6b757004000000000000000000000000000000000000000005000300060000000400040008000600f99b44b3f2b87d998f592a48c3923e5352e9cad5365a10703f50cc30965ba4297d65b3112721456b6ad5d5084fab5f8440188e5ed0080fe7cdda9dca85d0cce19ec9ea45c2cb270306771334ad55b420dc0aaeea5f92350c6d12775a6e3c386b2a", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400afcc00000800070000000000"], 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x801) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'sit0\x00', r5, 0x4, 0x22, 0x6, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x40, 0x1000, 0x9}}) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) read(r7, &(0x7f0000000140)=""/135, 0x87) 20:24:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{}, r3, 0x10, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000}, [0x10001, 0x20, 0x6, 0x7fff]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000580)={{r1}, r3, 0x8, @inherit={0x68, &(0x7f0000000080)={0x0, 0x4, 0x282, 0x1000, {0x0, 0x9, 0x81, 0x2, 0x4}, [0x7b, 0x9, 0x7, 0x4]}}, @subvolid=0x80000000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{}, r3, 0xc, @inherit={0x80, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x7fffffff, {0x1b, 0x7, 0x1, 0x1, 0x3}, [0x1, 0x2, 0x7, 0x7, 0x10000, 0x429, 0x6]}}, @subvolid=0xe6c}) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r4, 0x44d5, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r4, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000, 0x0, 0x0, 0x0) 20:24:29 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x18000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:24:29 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) openat(r4, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0xf9}}, './file0\x00'}) 20:24:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x3f, 0x4, 0x2, 0x7f, 0x0, 0xfffffffffffffffa, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffe00, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x12942, 0xff, 0x1a, 0x2, 0x100000000, 0xffff28e3, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x8, r1, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r2, 0x0, 0xa1, 0x0) r3 = inotify_init() ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000001c0)={0x8, 0x9}) 20:24:29 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:29 executing program 6: r0 = syz_io_uring_setup(0x21, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:46 executing program 6: r0 = syz_io_uring_setup(0x21, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:46 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:24:46 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2400, 0x0, 0x0, 0x0) 20:24:46 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c, 0x0, 0x0) 20:24:46 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x8, 0x0, 0x0, 0x21) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x8183, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x1, 0x20) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x20d315) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r7, 0x7dced000) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x83ac4, &(0x7f0000000440), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) sendto(r5, &(0x7f0000000340)="4fbd7c953f62c8c67353c4436b203f3a95373a850a34f86e2a8eb0b167d296d6bac82438ca3176dbab623cea4ecef3c37525d30c6a042780baa9706c3b37f2699a68d9bf65d10fe2b74bfb6426fd309767f30655a6704a2e074ad1272f486f48a661bacf5890ba9ee2e22ece944137b8bf0ef775e743558e12efaa28733ceb74de1caac47672463ec588839c4aad4baf1545f57b9f306713b8acd1252e9c2d2aa4b01eb07f71704cfd106a525c5a18bfa770c7ed4a9ad61e1e8dbc1cc53beeb8229fde3bf9a33d59468a8785a607f210ded1205d0dd53594b956886f4f1552ea614c13863583ecb4", 0xe8, 0x8884, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:46 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) 20:24:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) sendto(r3, &(0x7f0000000180)="3ba59342a46c3a4a25bd99d096b9a20da6d21f5a3dcdffb93c9d70fdf5b234ee4b45cb427c99b923ca9a4a53e25165516028f176bd7b5edbce099b324df88b0b42ec7dba923e82a39a7b72b9480fba85e7cadd1623726d77fff7a98a8337b29ef89f2d8350830b", 0x67, 0x24004085, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) dup2(r8, r0) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000200)=""/3) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0xc) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:24:46 executing program 6: r0 = syz_io_uring_setup(0x21, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', 0xe, 0x2) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x279) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = epoll_create1(0x81773636ae936191) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r3, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x3ff) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ppoll(&(0x7f00000001c0)=[{r4, 0x630}, {r5, 0x1015}, {r6, 0x1}, {r0, 0x1448}], 0x4, &(0x7f0000000200), &(0x7f0000000240)={[0x3]}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:24:47 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a00, 0x0, 0x0, 0x0) 20:25:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) 20:25:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x2000, 0x182) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x1a5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c653000ea53a1a21ab013c3286487b9c92a816f4d81f8af136b266d7c7acf"]) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={r8, r9+60000000}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r10 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) write$binfmt_elf64(r10, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x1f, 0x7e, 0x5, 0x3, 0x6, 0x5, 0x3d9, 0x40, 0x2d2, 0x9, 0x1, 0x38, 0x1, 0x6, 0xffff, 0x20}, [{0x5, 0x4, 0xff, 0x100000001, 0x1f, 0xfffffffffffffffc, 0x1, 0x7f}], "4efe66af814949deb5df2bff6f8269ef068613650a09c8830aaddc218945d32b8ec5e5d32fa389d911953962986dfe6699130b4434978950885d4dc8e43659be7b46f7c463adb526d2c7a29d671fe84c9045eb52ea574e31e8940c2d8b2aac93ed7f26d5db2bbafae18cd26e014147fcec601ff0e9d94146607102a8932ef5d437f07cf4038b2e0c89c71d7a504e742ed2db0717fd99878d7a71c88d65fbe17ffaf78c695dee5e0a0a02b0749fe27d9e3f432b721d62d7d3c273aae497d8075e075ee73a0b0b69050661b83bf1255223233dced67f606ce0c386", ['\x00', '\x00', '\x00', '\x00']}, 0x552) 20:25:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x24000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:25:03 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, 0xffffffffffffffff, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x42, 0x0, 0x0) 20:25:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) sendfile(r3, r0, &(0x7f0000000080)=0x7, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000001046e216057da38a64dbf98280d64276cfa60e62fe124a9ff6650500000025dd41487f9300f359e9f86cbd3a4681dc30abcf56c5aa3be930306ac3f3d2edce983900ed710cfc759776ae9a5e", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/dm_mod', 0xc2000, 0x115) 20:25:03 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0xa201, 0x11) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) flistxattr(r3, &(0x7f0000000140)=""/4096, 0x1000) 20:25:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r7, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000001800)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=@generic={0x9, "75ffce0111c559d7fa1592a1577f1ad2fe6b331dc289f8898b2d106a618acfe590ae131370fc902297aa5a25c3d9d616709ee664773087b46f36e2763b615851ddeec0107983aedcf5432b43e1e3686471cc71a0ce7775373740c60febfeac0f2d690ccc0c19dfd1cb4ca2bd2b01bba5f4b0812d0f42ee2d593de4d07ac4"}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001e00)="640c563eee35b98b2e76e4587d9f78539e7a004f836e1f29da33902fcd7d01540d97ff1987b8e59aaf8b8917c6a600aefb3572985f2461834bdef82b48bdb6802d390b6133570e6281a0128b29b4fd1bf535a95c849009dec9ba2cddb4b60ce8d32bb2fcecbd4c086f1a98800d755a10c0aa55344f3d4bb4a1d6dbe3d5781361ea4aca56c246740831e9ba734f146a3d3cfcdaea39f73cf26872bf2312ce4020185ce94d249f32ccf5941f3093e5833383944575e5313c6fadf8650f97aaa82bd8b6e886e502fd73370d36aaa4a4b5597c1685f361902f2598dece4e4bb23068af5888f5ff869048ffc04cf54a1ddcd3230bd24ae699b00450d1cc69983ea55bffe93256c42310ecc1a059c7675699dccef7c7631b693effa98423679512488e9425d628db0efd87091c1ef764f2cc40b1d2d631ff57145d1a3a840a6f1e0e0b114a9f8a0cd56d740861cbca8288a2e2d579b23e72e16c5c5bc97f83f7c3b9b062e591791f54173592b874ddf451765404433940c065a9fa23395826340ab8d2669b7e93a54d190bb0325abe4d29b8a0d269b349d7d2dd1fb6fa84fb8a1c8cf23a1d12a0e2369c9819e49572f9208804352fa26ed9d58859ee109c9a718683cc654555708398b4f6405b130df2524728fa6c71ed60202ba098e490f4742204c93e5c0c4a2aa5c02ff1965868e0653efb896d0c6f100b05cce862d5eec7e1c163bd4d92c932421822e57e1af912363083181606c49b29068d8a1a9702a4dcb020db361713b129a169539b2dd838f1e58359ac1113e42833311b2b9f593d6f1e31b07f81167d12f3770c95488974d2b9fc159e1441feb656027ff33f3422372106ee2bb8a0732b6d9ad23f21fc236f17572a633415e83f7df16822e7425bf5a684ec045dc1f9a6005986ac511ecc34b9b408d834deb807d165e9a95da27c03aae6d9decbe6a0e6345ec0c986aeaf88388128e47a9730ec15655346c1492806085b2fe72c8e2b25ddf8748791a90fcc964477bb79a4adcf4c55cd1c3fe88505b33172c4c23333d5285c895357e008de5f40c619464542679828a1b1b96b362085565773bb310f43d7fb61079369d44b1544f702c377fa6eb2c61b4a8db1a4bb620939019cebc6999c3d9bc1c53ca659352d37602a79a3e04f394722ea788a685995dbe1a2119a747133f26821ea761a42423d82ca67b02d164348d9fee1c71a2eb9e548f5d9640fa218a3d9baa68abb13effeb68ed30ab22b161ff5a7b70f6bfeab7d018b0f23e5c6870d86194c3428365757c3355c180e041a940bb7c03ddb40cbffa86340b3257bdac7b574df2b1ee57f5f8b1c3dc80c4290273f4d7d7168389b67ba5d99eb4721a81dc724b69b9f5b0d9f6928edf4d5200031ccaec5b4c89ffddff64f1ff2c7dafc8728da8c123ea5869b250d9a0610f5df570e4ee2fd95d19a5ed9b9297cdeffb20d3623b38bbf25bb85f9e29406979dc60bfda105ef57177a894d734610af65f2212e587f03ebe35c75abeefd0cf13935222bb5395eab23748a43aa541f641041cfa08acaddc863e303e851b21ca0415996c856e9cc377d008fcf4bfcaac950fcc163d31017f89d46cfec0c91026a9d2d333bdb5f823bdcee2616c93ffdac1b7fb14ccedfa8f4ee57588f1570385717e2b2ade057bc5259e6d7d8dab26e0b8511afdc942c93f6d7556913e962f70a28facd06e996164c25d4aa182c8f6935a715cf493c70ed88c063fe9ccf45d869398aca050980ab41244811fc2a2294f42ea7ad83ea7afa6e7da8d513d40726c32cc4a6e5cb5790bc247f64660cad803b6fb5a8debcfe6a3517fa7ed870ea15924452f8cf804cb9931a54a3b2880dbae490114e9da6b1d1869b8f3603f220155c04320e6017dd85b71c552038df21d2354ec388790cbe18beecea8dd188edbcb88db1f2890bc0eb631ebb57be1960f6f39ba2612a312a34e17c75025247466a5c8f6b464f1577cb7a01d7476bd8d22a9ea838eef87782b9b868134e508f6d204de563a19bc55848028aca38faa0afe5a98b094bd4985671ff959669a1408ae0854fcdeaaebd5b46c1afbd9e5fed4e719a22cbd388ac73522a3c248a39eb3642944cc60b77004bdbeb343d648aacf32b9ff04711e4523da8e1997b0b46594230980ec2b3644328563a397c503854882da19ef3791ac4f676763c840a80a3d4bac3cb96f4f55b2e67a2d07fb4dc725b31363a62191d851bec14a1babdcb9f7ce2dbe4c2defc625b7a70837b858622e5e8f0598c5be9ed291c2b3db77a2dd2e532c714a5d1d75b0953e9584bc347fa05ccbb6a9ae8163c967f101ea4b5395320f893baa79f032f21824c5c05c3759957f5d04fb09a9ecf1862aed677823668e4c463d3ca64a431d62edc2cf257f9a5afd1308fb5032c65a321abe68db28aadbc4f260322d2a1bd648eefff2466b59dea5430811131bdbed554e3087ea9aaf0efb90ec85607afe82faf2f18633a5379e9e25d13fd12d956a940ca428dcd79fae54b4381a3f5f13c0e9002c87053e6f9c84eb5a9be9f4790d71e2e90a3903a9a4c92559c6cfa63b1db439b4ae79c36100d0961d89ae0306549b62705cf1b83224ac56bc10468239d305d105db2b7e8ee337110839245c8775dc9f718588f5a8d48a915b4007126417de641aaa21e87db5321a17cbc848ed5c63e6be3d72333311097100d63696863f62a9a65c1563d460e0488a5084446b400a71edc9308b596afb4fa035e11b27c54d07f04f7af61583b1913265c4370624a951ac6bac4e0e761675ee2823f0fed510640663d4bcceaa4afebc8654c03ccf2460a640177adfb0847e39cc86046348a4f55bb50ea827d1a8e6146b64e7f32a1e7174367b3cac19a36c8c0b599d8329eacca947b886d29df8fd64ccc778d48ad0e259931129471da4d9d83946c5ca3d698ceeb2f027d890ce6b52070f4a6d7030680c0d421886d52a15628e311e17b4134eb656a59c8764ee9b5b2d2e9bb604612f78c68f9102a1fcc80d336f688f1cd9802736991e4e2bbea47082e1a351db7f323c5b423c25b9616ec3871b1e0bc3d680fea98b4968f6347d1722781ee84500bcb55238df6ba29eae94a8305a7a12e712b9a61192b9b7e9f0e865e48fedc987f0e377f2481478a022db9f8349f79b634ee658a01bee5b31cd2f9ca997ca56d6125e41b769eece337699268687c254f3ea21028771105f1d8969437672f5f973826cd3d865267427e612bab5b8056607e140a9a61597992cbc67ec4e1ff7b534a925746053529780692f91f6e35f2d69d0d4affe6af7ec50acfaeb4512b31f7baa14c95d9f36c421aaf0b281fddd686321ee3fa289a714fb0b5543abc688bbb0c777932e454adc1916b59a7c425caf148db68e04ff3d878d5753e727e875f0ffc29a604a32c30741087b30291cb1161533d0a62eb33cf65f7ee8718a1172973656ede051bd7e054ce08d6db4a1e1fe261687e0c0b7c2a2b3a6d7b8f4c7c046b258a8429bba7744494540ef784897cc2da2ab0550600d5682b7fea3d870a65b82117c589bd33ce7dc32a366333fc72d008c6e73b59bdacf16cdd72d7af1c7dcd6e1a3619dd0dc0baecdbf4a5e9e3842f163d1d7d9fdf8d8155a5be6f1bbdcaeb7b45cfce7a49bae1f1ad48bdd3ce508193b1d0a313f0d9d964cff746233b2738e1010ec1ade2b8c5a8a7980efa86b5814d75f13717560dfaa3616559a7517ebd9e758697c4e934a817706aed13ef073785a0f201a00d343c98de38d0350cd3d816e10c7a74c0cd26165909abcf225df8dde758a8812d38172931f7a8a969cf17e113122bea588670bb1fd299fa1c595d5fcad938cd9225ca0a81dac096ab6432d9edd1771d369bf6ab0da472183d4a9c6e99f3150e9d625e8b9c83292da2406fe6a0ded3176196eb5563f09c1d4347cec70bb07a1f4d97154e3652b751b74d7e9c5de9743114e696dbb760777e514beef8087c4f44788c5fc8723a3ca4c57c043d4dbc42fee76990ae0e9ef20e9574fed9e0cfd18d60fcd7b3eb77e13a793cb2a677cc4642ffd41143f6385fc2488b66dbf12985d3b2d4915c3cdeff3e5a1eeea71ab378897f988c5cce0cc1dafdb2fcd2a810e8f03e7cff6e95344bed8e4251cadde7f837c9863acf91fda70628e370e560e0f32af385d7f6c40d5bd6011918992a7d319bee6f52c6345917857fef0236c50e3bc65ca737250f5a8f0185d865d5d8fdbd8c7b53b63663299ee5609cac0d41cd206af5af706cea8023fa784c46c6149d97413f1272e53f9f15f53f0394adf102ca07e6c68edadc7c92b446b6ac3da511cb5100a2661d25129cd6719aaee61a6af4f05c4020045747acf383bc71787c3238f6b8bd20b4d76abec52188572eeda2c242d450940f994c25fc744d95169f6a8d045bddc002e94eabdeac4944788db32604eff140eeb5cde87c3f15f981120b0793936cc06c50e2c7e3c289342bc59752571700ee321a3e287ea4e82d41a1778a31ab1f6eadb653081a3e10d6029a80fae811a3ea0ac7d720e22e61c472f3228dd6e2b92e7f8fd308e28c82678d8b619488a9e912b42c8e0069033d8d78bd5cd325fb05bfa790fd6e7e09bd5d06c7d99ecbc1b7eb956e345fabb838b28e1abb42e0371cc5c976964f4557712a2e1ebc1ec479573ca3dde7497ec556e4a8c01ced228e5782aeac7676af0da4157717dddf5d76cbace7f8e6a8483ba4739bb892872b8c52eb2ea9ca5fea3e202a0a6c9140d6591749bd3700976006906ef70dc1ba24d9bfa5f800356968434315a1c6198ada9b712cf754a0a0632b2be6a16202e53aea85cdf74f2c4c39c72d0d01fe614f8020f23533a68d878d60c7c782e707963ac0a7affcd00d4cbef3a3c20e107205eb2e83d35925988d8156f0b74dcfe1c3fabc23e6e0422799686d943db69b79f540aa73156b5d8e1162007b2a824004eb13213645e1c0ed68fe1b00103688a54d11a2fb7355dcdbeafcc05a873beebf116751fc867d92163a878e281d136e0de635660f1289d7d16d505e700b55ab50580d33cc1e70fdf46cc96dc78daab6fbe34acac57d91093c77fc877379ee74d46a5bb12d02101197cb09e4e8b1b469d8fd7cdafcbfd6aeccc4d83785e63fa703d380e8cbfd885d4cf6d6649b3e5ffad7c8a0eb679a827592e9b01fef81bab3926a8b7c018f5209f17711fdd911010b57f3417a0b8a243efc20cff638a68a343658073d41a70c9d6553a815b7f5b425aa4a6b8a55b74849f509c10b88ba61789e7761c8ee86bca8d0763acb9a684501f5e5b2ecfd129cae2aa3d87e66164fc1a30d88ad6be0654e2572d4ec35a6ef1a935c02141068601fe96c0de74842b1ae13d7f93010a82aa9e4f6290c965d22bce8a8220b3b064d55b3f868e8529a1135fce3c8ee948ea15ce0b4f9d2c6fe96b640d902f646804afffd5d7006fb404a068921de4f8a6d0d8f77ba80b9e57941c7129f2b129dc27144704284419776cc70acb935999fc6356cfe111c4961b305fcc6c84dd7246fda6fa6cabb2d4843ff7ce7fa57f76d1647f8eb41f7553566989893efe15629e98838b23ab2b67075ca9492828094663a33ef9ee65ff02143121c740cb11e86ffde0d35c65a3983af0276dfce232a304eb87db25e4d05212a807a027813d2f4e6db5d4833a165b13cca47e630d037b9f561c9fb646b068c6814b010242e7be29e87f3d5b2d39bb3b88ef6b1ce1ca9c30d396d6ca75fb0a9565324b3fe057d036acdc236664c19c3e42c047fe36545f21c4874ee1c66fd2508368b2b3c", 0x1000}, {&(0x7f0000000280)="ffec30", 0x3}, {&(0x7f0000001340)="74fd483f9ba254fa383b28413867fc79711631c8f0549ac3d9c3df4ae87a737bdb41206700d87af127991a55877ff7d0ad5fabe5da56e11f44ac299e06d94e6f8c54b65f5554d3fc19f5956ccfdc6f3882baf2fafa5f31c41c74ff1f8370e8c96ace23db6d03eea10f5939fa1f04bb1f9a6825dfa2910f5c7d533de9ffb3771de4d660eb16eff5f57d1b0f5c2b030c2af578e3a9da3f7fb98bc4b3c34a67627e3c86dbde13e48df5156246efcdd459317b77b34822", 0xb5}, {&(0x7f0000001400)="dcc2de335deacb5aa4ad169c4b0918626f22ef3cec467ec78b9068dd38401c5972610b562f772eb3e86a0acff19b14c7f412c0329e397031e78208e622e931cf626c8ecb7318c79acd1474cada98b4eaf91d694d11a3422fea1bec62d2f7a4680aa19c482aa574e3c2b3c8e0dcc74ecbd481ed882fdfa380123864dd50a97f862d2de76f0880e89bd945842b8ffab3d0b4d34e857ebbd321358aeb6d9f3057ca429940916a2c4d7633c205", 0xab}, {&(0x7f00000014c0)="3e814e8a818e963ef1a1aee410ebee0d2e003ed2ca7e6b6288fcb610", 0x1c}, {&(0x7f0000001500)="5cc6a9fc4388aae711cfc07f98db5cb2de3ccc1aecf67e03f5be397339775f90d4967726a10bacaf8c5eb7b4a31f747103c6e41efeea7fa107860fa1f04147dba4bbbb1116f6cdd2444abb7be7bf321157ba37e86e01fc71b3a0b84b3a93debc0764468ac01989088ec433d413eb85d269aee7bcdadf1e5ad1dad6e3244d50cc52ba698957b958c6d784ce", 0x8b}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f00000015c0)="c07698a5e904b93b7b4248276f7a451227de53bb0bfd5740731c14c93aad8265643436222d1e7a2719222e443a0dc75436e084cef53b3fd7360387c98982f0d39fc4363894a8728229f1ed9588ca", 0x4e}], 0x9}, 0x0, 0x44, 0x1}, 0x100) 20:25:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) 20:25:04 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:25:04 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3000, 0x0, 0x0, 0x0) 20:25:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/platform', 0x133d02, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:25:04 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) 20:25:04 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600, 0x0, 0x0) 20:25:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x8000000000, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) faccessat2(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1200) copy_file_range(r0, 0x0, r2, 0x0, 0xa1, 0x0) 20:25:04 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ff6000/0x9000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40040, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20d315) io_uring_enter(0xffffffffffffffff, 0x1013, 0x44ee, 0x2, &(0x7f00000001c0)={[0x9]}, 0x8) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = openat$cgroup_devices(r3, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) lseek(r9, 0x7ff, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(0xffffffffffffffff, &(0x7f0000001640)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:25:04 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:20 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc00, 0x0, 0x0) 20:25:20 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3600, 0x0, 0x0, 0x0) 20:25:20 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = accept4(r3, &(0x7f00000001c0)=@caif=@dgm, &(0x7f0000000040)=0x80, 0x0) r6 = syz_io_uring_setup(0x2a6, &(0x7f0000000300)={0x0, 0xdedc, 0x0, 0x0, 0x5a, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000380)) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000003c0)={0x0, r6, 0x9, 0x989, 0x92a}) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x7dbc, 0x10, 0x3, 0xfffffffe}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0x99200d6bdccd9401) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:25:20 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x20000000, 0x0, 0x0, 0x0) 20:25:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0xffffffff, 0x9, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xffffffff, 0x3f, 0x1, 0x9}) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:25:20 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x30000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:25:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = pidfd_getfd(r0, r1, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000540), 0xfff, 0x41) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) io_submit(0x0, 0x7, &(0x7f0000000880)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000140)="d7ccecff5295a1bdd3864e7de41881b40e9ba607760beef26b6f5557da860c69957c400cfa15bf5138c20d4a9542e23916c2b47246acc287c83bd93701cf1db90ac18aca85cb4c949e81", 0x4a, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000200)="6c8acaa521e383c5aab944fb15847e356530d2dea840140a820be7190f95d4dc4d947217ae9501a901951510d8ff312bc33d387020f5dec535c505f322596b1d47d994fee4b0530f3085e3dd0bf621977b06c4b0bba409c53ac51e0fb1cb1bb04f09b0d47a7f67e6bca3b25e5f430e26bb5ac5cdba5e0f3b4f33f2d41ea8b6b5ecd80f992c3afd33627249e768c6f5a310477c0336bd40e71f9e2045b0ae0a139b806f1a943dd84156e3746bcdff50f9ca1484f540ad74d44553cdeae7bcebfa65ce89cce1ebf4a9f0740c70e2fcf7151fe117f283cd0adfd7535dc9e645f0ef", 0xe0, 0xff, 0x0, 0x1, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000380)="32c90a2cd24c4002ee235529a48c43b7e31aa82860d476a0a8cd3b72a214dd590e6005b56827024eabd2a3517641e9e412881ec9fa1675e21b", 0x39, 0x0, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x101, r3, &(0x7f0000000400)="3c059e3fc0127a24ce93641c0aa37f27920bdf2679066226b47d2dc4c375e292431ca008d13a99b019574ac510b785c832624c3671f115c5a0dd2f5b81d2e31ccc5dc8b5569e060fcef2a8a93d86ec63bd01558105db0ec63beef39a01a3d0811a65ea9e89555a10c6717c9aec21126ad7922d86dac787ebac09e053ea68a6b56b729381be680d8fbbf0c4c23e13dffa0a5f4cd141ee2b58df5cd49b0679bf9fd5a1ca8f5d371f0dc5bd19cfa931f15fff159d4d2d062db27534c9b383ab59f0db85ecc31103e735b4976109f766d2c71b3afeed98e9ca8f97a4bd874819f9b68f7e", 0xe2, 0x0, 0x0, 0x0, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7ff, r5, &(0x7f0000000580)="b31be28e224c6b2ae5c885039a39472b08e6a01a6b1f68177afca524ed9812815714ae55688b6ce1e11612d1a9c4d87b343a38f23c37efe487872037769b03a7205821fa", 0x44, 0x2, 0x0, 0x3, r7}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000640)="833866102bf38d4b132a6cd35ea37d504f5882f7c1795ab7ec09e44fba814cae90f94bf8e2a76f44b00a6e4bff1db7ef5f782a7bf5c42fe0770298d965cc286bf899bd65f9ad28e3ee147f4ad8e7b660c9173196fbca6d4d53cd14456e9423f28efc1809ffda6ae6da4b937e8a1e2ff7a7d99696da6e32b00e5a1f1b596f92c222df359f81dd1652c717396f7d60d45b4371230aa5a7745465fe1fc70e3db1b655f756941114fc8f61c589581d1cddd75760818e0f55bae8f6f81cf50d75c077dc68ba70ea7fbc298d7fb57980f9f1b9a53132370b42ee7627756a9d9ffdf2ee05eecec5c587", 0xe6, 0x4, 0x0, 0x3, r0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x66a6, r8, &(0x7f0000000780)="a676d3f8fe2c24ddadf8e72f3381c8b7f72c92c85c6bc2d2b477f4378390f66f065fa77a7beefc1a9db3cb848a2e44b6c1276b694e4af2b0a70e615ae5832fae36b6621ddb14f22be790ec95f751fbca2b1dc43fcbbeb383904ed8b250833129896a70b719ed03762d84441386dd09ee511f220d9dbf60cfeecf057acd3b6d9d044376cdca20d735b81bab2933f9b8592e8f6e39", 0x94, 0x2, 0x0, 0x4}]) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:25:20 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:36 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:36 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c00, 0x0, 0x0, 0x0) 20:25:36 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1200, 0x0, 0x0) 20:25:36 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x36000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:25:36 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) mkdirat(r6, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) openat(r6, &(0x7f0000000040)='./file1\x00', 0x2000, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:36 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) 20:25:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r2, r1, &(0x7f0000000040)=0x7a0, 0x100000000) creat(&(0x7f0000000080)='./file0\x00', 0x39) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:25:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x13ac4, &(0x7f00000002c0)={0x0, 0xd0b, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r0, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0xfffe, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x100002, 0x399}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) r9 = accept$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) getpeername$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="73fe49c153fe003652ae004ab8b90572ef6e97d8d93352396bf5cfb74b96ceb6b4f725a3fb0333a5675f6508ada18a3d4f9051fcee2431c894363a8010e86fba170fed9235c4a46410f47e6b1e90c4665eed5ec9f8954a1323c4aa466a9f6cbd98539a0145a24ec979d2a41f7b2b7c1ad2e10ce60f8bc3a053c4914b7b34374efea584820face1bdb061bb37fd6379102c2251f5377147a0e57d5c4343bab886020e4c74d1c3ddf13868efc29a4350513e8b1b2440c8446df829a072d1040a09b8fa6ba36cd39b20c41eb9031358936fd4c4fb43c326ffba20963e6960d02dba480d6eab6bcd233eb93adb50f2fa1c35fd50e4bc596800000000000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf2539330000000000008000038014a51a000000000000000000060002a4b28e00a29dfd3180040003003000018036000300080d2600050000000400030004000300070002002b7b000062c759426339d24b04000300080002005e2d2d000e00e7ce02152f6465762f66756c6c000000040003000c0001800600"], 0x9c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:25:36 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) mkdirat(r4, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) r5 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x836f, 0x5, &(0x7f00000004c0)=[{&(0x7f00000001c0)="38ce2e5326f4df3c6f2a415e3b2dbca4b4ed0129c08b671e623547283a4d20d13409c1f1c15c47d4b8fd7a4c4e4c6b9134cc9d43e3ce79f35889696d1941c107937ada26087222575a7d277c63a4b75a93a8c151ca9cd54ff80e2b8b", 0x5c, 0x8}, {&(0x7f0000000240)="eb3ee65d0186ffc3e3fbaf8df7fc6709174df3bdfd4a8660771ea9b328320fce5bd936dba1b5df5741fa93f61f57eedff25596eaacd9ebdafc0a5923f174cf14c15819de764130fc1aa1bbf34349499dc8922eec62289208bbd132f754affb23116d838805afa03d79dc1ae09a0e544225aa3cbe10b646dec89650695371406cff034c3a91e795428c75bc", 0x8b, 0x7f}, {&(0x7f0000000300)="a9cc7682eae401ac53a4d3268c7979c2d6b44e197a0d7abb40e8975859a7acc78ab63f9fe954b56c0379b9c90ac7896fc1aac9d545f040555a2f64ef3f0be962544c03ac66cf81725b0839b869b1c34a48dcb4ea74831c71c9968f1c65cb8bd8ffda14aa5a86d881a78e1ca34b00d38682d6fcb178e04e364502e7e65f089ee327197c71c1bb1515", 0x88, 0xff}, {&(0x7f00000003c0)="2cd2894e8f20e7f2b43aab26f5408e9509156e4fc679a45ab76855b0eab49cc0a7f02cd8ad9d32ce", 0x28, 0x1000000000000}, {&(0x7f0000000400)="80b8879da6a38b208f9342fd241ff9c0261dd6ff0b9380cb509e2bb4c91131531b8144d59c01da763c161d688b66d7ded740f74b16ba66030de23ca881dd8d915f1a9bfe628259ed3ec3781d9b25cdaed2ff43808c3b6d9e91f3a2face64479da2225037709d8af2942cbc0c54cdcc497f6edc24dad14f4a52446a23f01816b3557a", 0x82, 0xad}], 0xa0000, &(0x7f0000000540)={[{@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@fat=@sys_immutable}, {@dots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, ':'}}, {@uid_gt={'uid>', 0xee00}}, {@euid_lt={'euid<', 0xee00}}, {@uid_gt={'uid>', 0xee01}}, {@dont_appraise}, {@subj_type}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash}]}) openat(r5, &(0x7f0000000640)='./file1\x00', 0x4e0100, 0x1) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:25:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000040)=0x10001, r1, &(0x7f0000000080)=0x1, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:25:36 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d2, 0x8000, 0x1, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5000) ftruncate(r5, 0x1) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e170ba5e5ba6683fcaad3c79f39"]) openat(r6, &(0x7f0000000240)='./file1\x00', 0x610180, 0xd4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r7, 0x0, 0x20d315) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) close_range(0xffffffffffffffff, r8, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x0) io_uring_enter(r9, 0x76d6, 0xd30f, 0x2, 0x0, 0x0) 20:25:36 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:51 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2a000000, 0x0, 0x0, 0x0) 20:25:51 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1800, 0x0, 0x0) 20:25:51 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:25:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000180)='./file0\x00', 0x1400) close(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:25:51 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x75, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20d315) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x12a80, 0x0) r3 = eventfd(0x8) r4 = socket$netlink(0x10, 0x3, 0x1) copy_file_range(r3, &(0x7f0000000140)=0x9, r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x420102) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) copy_file_range(r2, 0x0, r7, 0x0, 0x5, 0x0) 20:25:51 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x80010, r4, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000016c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="b205f1f8b67d6ad375b041706e605598432b7a3fd18a4a682ffcdb7a3f2ad37d21ab4503737a761d61ec05baf096cb39a9fc25d2b8e533888d6acd8abed78b8ce0d19c1f56d6afd1ebc53d0fccc85cc72a84cde9a8347416dce31c102c95b50e51081d078eb7356517c378cbe172ab72888fea462297c17f09165b73d4f628fee3b02e2fba90c64dd97a05fcd2de681a7f79fb4aee05a356b3f99d482fbf87cbf2c7", 0xa2}, {&(0x7f00000003c0)="be9730eb0a4c7f4cb5f0acce3496a929f97e00ba4c789ae9909908ef5a1155b9dc6fa90cba541de26dfdf002700dddc009e226ce4c938e8a2c3c6de02d4d49fd692f63e1628fab6c3d2690de06534cdca5ae5b20d94a2d3f4801fc1b131c4386aa834a4b03d18e64f64eb3768d432a6258be05d3a03fd6d8322348b9598f441c4c495b8b816f662e72510c90261707fc0b4ae67f75886857733ffe6c9b4bfcc8db6edfe32e407df342c7fe7f7ca194af91d370ea256ffc7996c5ed06b7ad6478e29997a9b18cb82870b6cafa527c7cd1d2f5a6fbd5640ed814f3e68a7a7f1e7b7b", 0xe1}], 0x2, &(0x7f00000004c0)=[{0x1010, 0xff, 0x1ff, "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"}, {0x70, 0x10e, 0xaf6, "48386620f96f38f669e3c275468035df505c0917a8042f22e43b5da1b9d91bb59ca976e35e611e7615a1013a81588b24cd32aa5cb3e006a75fa19a5a6265844abb5bc0dbfd4ea3a6c54127d03c2af4f1b1fd6a567ac6375aa8426b97c983"}, {0x108, 0x10a, 0x3, "a1e1351a8070dee5b961f76104a765e6366f19eab5951e3fd9cbfe8f4394a66c2623951e74e0d7dc8435743bd6ca0d24632fe4322cf6458c45e1ac1091d579501e77096891c6b59d23c871bbbbca99b2abdd3984ebdde93269057663e68a7b3dd61d6e25a3dee85c3290b371f867fa66a5406e57b59e65dc037f7e88dd06db737058b682814beedb9efce9723d96c4fd53c5e90446c20fdf0a3f1c4b710abee4dc8dd25854d7f722c9eaf0e6cb89afb055cc4763966444a0cb13e156c7238dc288f0eef42444f06b0c1544a33fce95294a7b8b6cc07cf5ed2c93ed904502cba323000c4d068981c315a0fe8c8176fad147"}, {0x58, 0x104, 0x101, "554d10da394677ab72a0e6cf2789d2975327c77deb5d03d82e11ccf4d7b7661829af7ad72b4fd3ae7da76e7d3ba2c6db22614e3d75e280bd6a3559e1ab42894c20ef8b"}], 0x11e0}, 0x0, 0x40081}, 0x1ff) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:51 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4000, 0x0, 0x0, 0x0) 20:25:52 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:52 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xcde2, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) mkdirat(r4, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x44d5, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) io_uring_enter(r5, 0x41f2, 0x2b4, 0x0, &(0x7f00000001c0)={[0x5b1d]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:52 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:52 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:52 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:25:52 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x448a4, 0x0, 0x1001, 0x2, 0x0, 0x1000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) fallocate(r3, 0x0, 0x8, 0x7f) 20:26:10 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x30000000, 0x0, 0x0, 0x0) 20:26:10 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x4200, 0x0, 0x0, 0x0) 20:26:10 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x1934, 0x9324, 0x3, &(0x7f0000000040)={[0x1]}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='/dev/full\x00') r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) syz_open_dev$vcsn(&(0x7f0000000280), 0x3577, 0x80000) io_uring_enter(0xffffffffffffffff, 0x58ac, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00, 0x0, 0x0) 20:26:10 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x40000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:26:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x3, 0xffffffff, 0x0, 0xb8}, 0xffffffc1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:26:10 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xb2bc) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) mkdirat(r7, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_setup(0x42e5, &(0x7f00000001c0)={0x0, 0x93e, 0x20, 0x1, 0x179, 0x0, r7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80800) copy_file_range(r0, 0x0, r3, 0x0, 0xa1, 0x0) 20:26:10 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000040), 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) fallocate(r2, 0x35, 0x1f, 0x3) 20:26:11 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000001c0)={r0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000001075f08b8000000000000000ab2ce7070000006c653100eb0cc271a11ae1f66dcbafe122bceb152757cdce264a3b0b60a7cd8a9cb169dd4b015381878b06b2540cd0d941a8e9ea4e30f7eabfe7346be35557dfeec776a81e80b47c9924350284b86039f7ac5e24a12d7b9e501acfaf4c5e70453c56d74f189f52755cd3a870031354a9ebefc2a33016b42135c17ae1e69ae2d95d7080b55ef9eb27a26bdffa050f210be23c000000000000000000"]) io_uring_enter(r5, 0x51d8, 0xd297, 0x1, &(0x7f0000000300)={[0x3]}, 0x8) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, 0x0, 0x10001, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) sendfile(r7, r8, 0x0, 0xd78) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r9, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:11 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='/proc/self/exe\x00', 0x0, 0x82) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x40, 0x40000) io_uring_enter(r7, 0x6fca, 0x4f06, 0x1, &(0x7f0000000200)={[0x1f]}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x501000, 0x6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x6000, @fd=r6, 0x9, &(0x7f0000000680)=[{&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f0000000600)=""/74, 0x4a}], 0x7, 0x1a, 0x0, {0x0, r7}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xe, 0x8000, 0x0, 0x1f, 0x0, 0x1}, 0x3) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x2000000, 0x0, 0x0, 0x0) 20:26:28 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2000, 0x0, 0x0) 20:26:28 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x36000000, 0x0, 0x0, 0x0) 20:26:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x42000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:26:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20d315) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x200, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r4, r5, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000001000000180000009e767a25517942e42f35c5cc333520c9c540e356cdce30455ecd22039f5c5c8cf8b72127e98650fbf340daf1fc94fa861045c6c4472e37022523a59ecdca4c1b634768fe876219b5c89f552d46f55a5de832b5db6bfa5b2bfd49b9f2b5b7d616a29e1b62304c7f5fec7283eee0eaad20b3d0483872d286fad116bed6f341045c9356689acdab8a8c042e490300000000000000bb135d139e19c36a292d8914c5eb1db5c6c9e28aa8014b18306cc6a28990532dd2a7cf", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB]) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x32142, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000380), &(0x7f0000000400)=@v2={0x2000000, [{0x9, 0xec}, {0x7fff, 0xb35}]}, 0x14, 0x2) memfd_create(&(0x7f00000002c0)='trusted.overlay.origin\x00', 0x7) copy_file_range(r1, &(0x7f0000000300), 0xffffffffffffffff, 0x0, 0x4, 0x0) copy_file_range(r0, 0x0, r6, 0x0, 0xa1, 0x0) openat(r6, &(0x7f0000000140)='./file0\x00', 0x201, 0xe2) openat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x10001, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 20:26:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:26:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/net', 0x200, 0xb1) 20:26:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x100000001, 0x100000000, 0x100000000}) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:26:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) creat(&(0x7f0000000280)='./file0\x00', 0x14) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xd7, 0x9, 0x5, 0x0, 0x0, 0x3, 0x2248, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x2559a9eb}, 0xc0, 0x9, 0x200, 0x7, 0x8000000000000000, 0x5, 0x7, 0x0, 0x34, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_generic', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x0) 20:26:28 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) io_uring_enter(0xffffffffffffffff, 0x6b7, 0xf14b, 0x2, &(0x7f0000000040)={[0x7d]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x2c0000, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r4, 0x15a0a85d, 0x0, 0x2000000, 0x5, 0x1, {0x0, r5}}, 0x7f) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r7 = signalfd(r0, &(0x7f0000000040)={[0x3f8000000000]}, 0x8) ioctl$CDROMVOLREAD(r7, 0x5313, &(0x7f0000000080)) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r6, 0x0, 0xa1, 0x0) 20:26:28 executing program 1: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x9, @private0, 0x5}}, 0x0, 0x0, 0x5, 0x0, "dbcaee53927e48a22590c783d82fee89e6b55b44dae4c49b4cfb4dca5597b362961e9b52515090aa35485233514d09c05d7289608a759742507857f648d7af5d71e25d37826b16f339e7504ade8ba8e6"}, 0xd8) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x0, 0x100000001, 0xfffff001, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:26:28 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xfeffffff, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:26:44 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x3c000000, 0x0, 0x0, 0x0) 20:26:44 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2400, 0x0, 0x0) 20:26:44 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xfffffffe, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:26:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8082}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000440)={{}, r4, 0x10, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000}, [0x10001, 0x20, 0x6, 0x7fff]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000580)={{r2}, r4, 0x8, @inherit={0x68, &(0x7f0000000080)={0x0, 0x4, 0x282, 0x1000, {0x0, 0x9, 0x81, 0x2, 0x4}, [0x7b, 0x9, 0x7, 0x4]}}, @subvolid=0x80000000}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000140)={{r1}, r4, 0x14, @inherit={0x50, &(0x7f0000000040)={0x1, 0x1, 0xff, 0x7fff, {0x7, 0x80, 0xfffffffffffff801, 0x9}, [0x2]}}, @subvolid=0x1ff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r5, 0x0, 0xa1, 0x0) 20:26:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:26:44 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:44 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x6000000, 0x0, 0x0, 0x0) 20:26:44 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x810, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x103) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r9, 0x4c00, 0xffffffffffffffff) copy_file_range(r9, &(0x7f0000000040)=0xd5d5, 0xffffffffffffffff, &(0x7f00000001c0)=0x8, 0x200, 0x0) sendfile(r6, r8, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0xd9, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xc0e}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x15a) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:26:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7, 0x80, 0x1f, 0x6, 0x0, 0x3, 0x16010, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x2, 0x2bfc, 0x4, 0x1ff, 0x6, 0x7, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:26:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x80000000) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x18, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:26:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x843, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x900, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x102100, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x80464c453f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x0) 20:26:45 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x200000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:26:45 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x80) sendfile(r3, r5, 0x0, 0x20d315) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x10001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20d315) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r7, 0x0, &(0x7f00000001c0)='./file1\x00', 0xb4, 0x117f81, 0x12345, {0x0, r9}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:26:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(r5, &(0x7f0000000140)='./file0\x00', 0x8800) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, r7, 0x2) 20:27:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x20000, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xfffffffefffffffc, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x200001, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00') close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) io_uring_enter(r5, 0xddf, 0x8d4d, 0x3, &(0x7f0000000340)={[0x1f]}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000380)={@loopback, 0x41}) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:01 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) openat(r5, &(0x7f0000000040)='./file1\x00', 0x10300, 0x47) 20:27:01 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x40000000, 0x0, 0x0, 0x0) 20:27:01 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00, 0x0, 0x0) 20:27:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x600000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:01 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:27:01 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0xc000000, 0x0, 0x0, 0x0) 20:27:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ftruncate(r1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) ioctl$CDROMPAUSE(r2, 0x5301) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) 20:27:01 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) 20:27:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8003) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc00000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000040)) 20:27:01 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1200000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) r7 = openat2(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80200, 0x8, 0x18}, 0x18) inotify_rm_watch(r7, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:01 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:27:16 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3000, 0x0, 0x0) 20:27:16 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1800000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:16 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x12000000, 0x0, 0x0, 0x0) 20:27:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000400)='net/dev\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r3 = syz_open_pts(r2, 0x8000) dup2(r2, r3) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000180)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) copy_file_range(r6, &(0x7f0000000080)=0x5, r2, &(0x7f0000000140)=0x1c, 0x88, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r2, 0x0, r5, 0x0, 0xa1, 0x0) 20:27:16 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) lseek(r5, 0x9, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) kcmp(0x0, 0xffffffffffffffff, 0x0, r8, r3) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4d, 0x3, 0x1, 0x6, 0x0, 0xb404, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x1000, 0x100000000, 0x8001, 0x8, 0x4, 0xffff, 0x4, 0x0, 0x7fff, 0x0, 0x10001}, 0x0, 0x9, r3, 0x9) sendfile(r7, r9, &(0x7f0000000300)=0x5e9, 0x6) sendfile(r3, r6, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:27:16 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, r0, 0xffffffff00000001, 0xffffffffffffffff, 0xb) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:16 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x42000000, 0x0, 0x0, 0x0) 20:27:16 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r1, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 20:27:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r2, 0x9) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:16 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x1e00000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x12e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x0) finit_module(r0, &(0x7f0000000040)='$&`%\x00', 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1aa) openat(r1, &(0x7f0000000080)='./file1\x00', 0x80c0, 0x100) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6e, 0x3f, 0x40, 0x3f, 0x0, 0x1, 0x60580, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1f, 0x4}, 0xb20, 0x6, 0x4, 0x7, 0xffffffffffffffe0, 0x6, 0x1a8, 0x0, 0x892b, 0x0, 0x2}, 0x0, 0x1, r3, 0x8) 20:27:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x6a4d, 0xa26e, 0x2, &(0x7f0000000140)={[0x9]}, 0x8) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:33 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x18000000, 0x0, 0x0, 0x0) 20:27:33 executing program 1: syz_emit_ethernet(0xd2, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast, @val={@val={0x9100, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@generic={0xd, "04001870d60a5d6ec64032b37305e36b912d8996610ee73817790a6f8b2ddfb7c6b3eb7566b74d45503b3a59872fc3a5218f72c07c97d5c8baa3e5e7d8d33767118a1150a4f1a65491d95a44278ed4d83b1ad5b46c3bc08b6d6c0e9df9de561625dab1a3eea98d0f6cef364ea1b91bd5e310edf84a6a57081ee5893badd5450ea6658ebf0755ead10b2fca4263ece5787873d91d055b34b1120bc4957e28aa27da8149dc7d0a95233def342edecff2007d8c659e4612ba043fb7f5a8"}}}, &(0x7f0000000040)={0x0, 0x4, [0x89c, 0x27d, 0x369, 0x8d6]}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socket$packet(0x11, 0x3, 0x300) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r1, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:33 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2400000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x80800) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x2000521) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r5, &(0x7f0000000180)={0x20000, 0x2e, 0x18}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) 20:27:33 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3600, 0x0, 0x0) 20:27:33 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2, 0x0, 0x0) 20:27:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r5, 0x2, 0x0, 0x200}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20d315) io_uring_enter(0xffffffffffffffff, 0x10c, 0xab4b, 0x1, &(0x7f0000000140)={[0x7]}, 0x8) 20:27:33 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x200) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0xc194, r1, &(0x7f0000000080)=0x9, 0xffffffffffffff01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x22902, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) openat$cgroup_int(r0, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x180) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) copy_file_range(r2, 0x0, r3, 0x0, 0xa4, 0x0) 20:27:33 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 20:27:33 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x2a00000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:33 executing program 1: rt_sigprocmask(0xb0384e7438b62df3, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x80, 0x40, 0x9, 0x0, 0x1, 0x22, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x240, 0xfffffffffffffffe, 0xb4, 0x4, 0x2, 0x6, 0x4, 0x0, 0x6, 0x0, 0x3cec}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x9f, 0x1, 0x8, 0x0, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x95f, 0xe6}, 0x10a50, 0x7ea9, 0x3f, 0x11deae56763cc63e, 0x100, 0x100, 0xa4, 0x0, 0x6, 0x0, 0x1}, r2, 0x0, r3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2529.223599] FAULT_INJECTION: forcing a failure. [ 2529.223599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2529.226194] CPU: 0 PID: 12760 Comm: syz-executor.6 Not tainted 5.10.197 #1 [ 2529.227659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.229421] Call Trace: [ 2529.229975] dump_stack+0x107/0x167 [ 2529.230753] should_fail.cold+0x5/0xa [ 2529.231572] _copy_to_user+0x2e/0x180 [ 2529.232385] simple_read_from_buffer+0xcc/0x160 [ 2529.233375] proc_fail_nth_read+0x198/0x230 [ 2529.234282] ? proc_sessionid_read+0x230/0x230 [ 2529.235232] ? security_file_permission+0x24e/0x570 [ 2529.236273] ? perf_trace_initcall_start+0x101/0x380 [ 2529.237370] ? proc_sessionid_read+0x230/0x230 [ 2529.238323] vfs_read+0x228/0x580 [ 2529.239067] ksys_read+0x12d/0x260 [ 2529.239816] ? vfs_write+0xa70/0xa70 [ 2529.240605] do_syscall_64+0x33/0x40 [ 2529.241409] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2529.242485] RIP: 0033:0x7f3195b7169c [ 2529.243275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2529.247135] RSP: 002b:00007f3193113170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2529.248727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3195b7169c [ 2529.250233] RDX: 000000000000000f RSI: 00007f31931131e0 RDI: 0000000000000004 [ 2529.251726] RBP: 00007f31931131d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.253248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2529.254727] R13: 00007ffce5569d5f R14: 00007f3193113300 R15: 0000000000022000 20:27:33 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:33 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3000000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d315) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x42}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x4000003, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0xa8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:33 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x8}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r2) ioctl$FIOCLEX(r6, 0x5451) close(r6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(r1, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r6, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_pts(r0, 0x10000) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x62200, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000140)={0x86, 0x38c1a2d5}) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) r6 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x40, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000340)="2663b71a419066492eb140c289bfa7f6e0123aefb6e9e9974ce9b128f4b6099c7bfa7dbd714c19326549f4fb7bc9fbdafc8934308764329cd59b75c7875c309fff891b98007468b5bfff66df635a8df8af76afac543b919cd8d72b9912caa5db13be896496dc0de783dadeb1b8acc587f46e76774bb1", 0x76, 0x7fffffff}, {&(0x7f0000000280)="2f2217d652a923b7c4dfe849099e5748bb0365eb1fe460b81deb1064c4db", 0x1e, 0x2}], 0x404440, &(0x7f0000000540)=ANY=[@ANYBLOB='hide,norock,uid=', @ANYRESHEX, @ANYBLOB="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"]) read(r6, &(0x7f00000004c0)=""/37, 0x25) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:49 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3600000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:49 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x6, 0x0, 0x0) 20:27:49 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x1e000000, 0x0, 0x0, 0x0) 20:27:49 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00, 0x0, 0x0) 20:27:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0xee00, 0x0) 20:27:49 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r5}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x400, &(0x7f0000000300)="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", 0x1000, 0x5, 0x0, {0x0, r5}}, 0x80000000) 20:27:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080)={'wg2', 0x32, 0x32}, 0x6) dup2(r1, r2) 20:27:50 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x3c00000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x434c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x2400, 0xdb, 0x4}, &(0x7f0000000280)='./file0/file0\x00', 0x18, 0x0, 0x23456}, 0x4) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x3242, 0xeccf, 0x1, &(0x7f0000000140)={[0xcc0]}, 0x8) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:50 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4000000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000280)={{0x0, 0x80, 0x7, 0x225, 0x378, 0x4, 0x1dd, 0x3}, "a91955158b5aaac51f3775c6ffaf8b0e169c25cb7bde6ff8c5069a0e998e4ee51c9b7eca1f61eae50c81e99485a058612aa3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x952) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r2, 0x0, 0xa1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in6=@local}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) fadvise64(r3, 0x10001, 0x0, 0x4) [ 2545.983158] audit: type=1326 audit(1695932870.390:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12787 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343a7fb19 code=0x7ffc0000 [ 2545.995165] audit: type=1326 audit(1695932870.390:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12787 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343a7fb19 code=0x7ffc0000 [ 2546.013253] audit: type=1326 audit(1695932870.397:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12787 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9343a7fb19 code=0x7ffc0000 [ 2546.038070] audit: type=1326 audit(1695932870.401:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12787 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9343a7fb19 code=0x7ffc0000 [ 2546.054939] audit: type=1326 audit(1695932870.402:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12787 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9343a7ec27 code=0x7ffc0000 20:27:50 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/virtio_net', 0x0, 0x114) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) pidfd_open(0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4a, 0x711, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 20:27:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x399}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20d315) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:27:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dns_resolver', 0x22902, 0x98) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:50 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4200000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x9, 0x0, 0x0, 0x400, 0x22880, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f0000000040)={0xb, 0x2, 0xbc7}, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:50 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x20000000, 0x0, 0x0, 0x0) 20:27:50 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xc, 0x0, 0x0) 20:27:50 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4000, 0x0, 0x0) 20:27:50 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000181b0000", @ANYRES32=r1, @ANYBLOB="991cef34c03227074c3d8155fbffff7f"]) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) r2 = socket$inet(0x2, 0xa, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x103881) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 20:27:50 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0}, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000656000/0x4000)=nil, 0x4000, 0x1000004, 0x94012, r0, 0x10000000) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r3, &(0x7f0000000100)=0x80, &(0x7f00000001c0)=@xdp, 0x0, 0xc0800, 0x0, {0x0, r4}}, 0x3f) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r5, r2, &(0x7f00000028c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f0000002880)={&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000002740)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/17, 0x11}, {&(0x7f0000001540)=""/154, 0x9a}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/40, 0x28}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/150, 0x96}], 0xa, &(0x7f0000002800)=""/78, 0x4e}, 0x0, 0x1, 0x1, {0x1, r8}}, 0x1) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:27:50 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x8000000000000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/cpu', 0x0, 0xa4) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x10001, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x1a5) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair(0x6, 0x80000, 0x2, &(0x7f00000052c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000005340)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x6, &(0x7f0000005300)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5], 0x6, 0x0, 0x1, {0x0, r3}}, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x32, 0x4, 0x7f, 0x8, 0x0, 0x38000, 0x40, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x8000, 0x9, 0x8, 0x6, 0x4, 0x7, 0x3, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x40000003, 0x1, {0x1}}, 0x400) copy_file_range(r0, 0x0, r4, 0x0, 0xa1, 0x0) flistxattr(r1, &(0x7f0000000080)=""/25, 0x19) syz_open_dev$hiddev(&(0x7f0000000040), 0x3, 0x2000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) [ 2546.549867] device veth0_vlan entered promiscuous mode 20:27:51 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="778900000000ebff6819eb3e000006000b0000000000"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000024c0)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000000)={@local, r9}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)={'ip6_vti0\x00', &(0x7f00000025c0)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x4, 0x401, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7800, 0x8000}}) 20:27:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:51 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0xfeffffff00000000, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:27:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_apple', 0x0, 0x11) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:27:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2546.920716] device veth0_vlan entered promiscuous mode 20:28:14 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x4200, 0x0, 0x0) 20:28:14 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x24000000, 0x0, 0x0, 0x0) 20:28:14 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:28:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x20d315) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:28:14 executing program 2: r0 = syz_io_uring_setup(0x1083, &(0x7f00000000c0), &(0x7f0000b6a000/0x2000)=nil, &(0x7f0000f19000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast1, 0x5}}, 0x0) io_uring_enter(r0, 0x56aa, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x50, r0, 0x0) syz_io_uring_setup(0x1458, &(0x7f00000001c0)={0x0, 0xbf7c, 0x8, 0x3, 0x23, 0x0, r0}, &(0x7f0000b6a000/0x4000)=nil, &(0x7f0000b6a000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20d315) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000023c0)={'ip6_vti0\x00', &(0x7f0000002340)={'syztnl1\x00', 0x0, 0x4, 0x16, 0x4, 0x5, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7800, 0x7, 0x400}}) sendmmsg$inet6(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="bacd7f153930e848f35125b1cb29dc41a8491770b82cbde8d3040000004d980ddeea88ccb30027cc", 0x28}, {&(0x7f0000000340)="29a98590a6c49da93849b3f9556365833fdaa0a65e842b77edeb85cd8f7259c8185345bacd987f826713046a7952364a4f312cc7112ecacc2097abaf7c7612425af3f7823975c893f787f6977355b577b4fa9e6d6fa6784a5b92b4c17e8ecbb9dae048aaf789daefec6e577ee80075cc023f5f408e15395afdec0b2d8a27d5da9f591ce3ef39434f6c", 0x89}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000800029000000360000003b02000000000000c910fe8000000000000000000000000006000000000000001400000000000000290000000800"/72], 0x48}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x6, @private0, 0x4}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="87fab417af6ad7feab0ee1ed1c1586046d2b63df57b356ef54694051402cddc3caabaf7efbb3983d736ba817d58e6a26240dc658ab7b956c119c1b1383402e51dfd44c61ae3adea4add3c7fd36680c0dc0066132ba39c977455a021d64eacbd3d599ba0f75e07ee6db71df2945748f48bb9a21147aa552408e4ad394e6d6e7d1f7e04ee5774957cacc0e828f66dce9d33e5c2c31dff65b2bc09c", 0x9a}, {&(0x7f0000000500)="bbc12a95755ae75d8f617694bf113d720752e1", 0x13}, {&(0x7f0000000540)="b677127e8e0c75d001af30", 0xb}, {&(0x7f0000000680)="1365dbcb1bba7ecc7705ec4f0ab33736b202e660da5ed1c7a648c23463f20cd9d164549e1ee5d76ebbff729e776378e8c69f646d6093d486f9a4954ba20d522fd4c10ae5ccb79c0dff7d14f4c6d4c054a723f1de290b7c39e9e0f9623925d3bb9a788f9129dd26770fe9e2a42705ad106e6ad39fe8743a7920519ed364b17a6f326ed25f2359b6e3a6e48da8406cfe937c6108a9151ca62ecf42d6bbe499735e1b41faaeaa84bd429e8f66461eb84ae90fcaa3576831a497a69abb6bedbea7", 0xbf}, {&(0x7f0000000740)="dffc4d5620cb83976ba2c4c1709daade74b1e788e0f4769413362b7a920c870f2587425bdf6a9a3ccc2698e6381781fb2876cfe82a8fe805cb0a0b86d44851f4752fc949c9dd3da19813ddfb4f9356be1558412efcd9bf6e8826c4d3472fbda9995ab58fd586c144b632dbdb3c686b8525d22ce99fb24f03aa6a27525265561e1e4d6ed55fd6c658e42461db67501cdfee940da2923c671b61032d09232c5b2c5d77d6bc2ebca8abbe17a6825d736cfe5bce18fcf5eb42f17cbad1508bc1d78d865a34b6b534e4", 0xc7}, {&(0x7f0000000840)="3965f4d49f5a6a1be6a003524257db97d2dbf3f9489410728013c8b510bd5fec42e9069fc1fb99ad049ad82683f0cf9323e283f6998ec556f0a6a40f3fbd704ad614e2b47fcc725a91ba68bce7961aacd116a045ea0c8daf8f8b36b3bb73ca7b43393b986ebaca5f50baa13a6cb7a1b7f26bbcd2d2907108f5b6c39b6e114a409953426f6a656f1b8109d713b0d1886efaaef22fe13c355eaf0bfb0b5c4fd5650f9811a35cef888fb6e04f71ac895871f30571b2c253e2b534a37e5fc38c76b2bc098f42700c9530ccfce1d4a7c70715a7d49a7bb6f8ab094e8c6f0942546a6bb76540d62e418c37d5a883d4046adf220ab35b", 0xf3}, {&(0x7f0000000940)="9d79b4f06ab1ebb58ff41d4a3851603bfae6ee083daed97a7eff018c95c995aa4037d382ad02cf564ba26b932f9b1c3a72397efc4db1950a1f981216a4a117518cc38a2a12e80f6594f798d1f2f1606c2daecb2a1fc561dd91d4fc50841523522c96b4489d0fa1743f5b18cfa91ca6f2b5a2cb36ba05f6922faf15b79757da686875e40efc3fc9d3fdc0703c54cb9c75e8d939994e6a362a7c38fe400cb5364961bc72a1d55aab1c734d2f6b4c9d0e56ed1ce68f00719f6f8501e0a2a499b382", 0xc0}, {&(0x7f0000000a00)="954be9ae79aff0582b1df3adebcab29e5e3266648f9681399152e037e63b5f7995d91e7640dae410f667f139cb50ec384a652e78ca7a2e3efe95fd80c89c42c7aa2f4519bb9cbafe461bc7b4fd93ca6353a2b9b5961fb74670af8f707e8969bb4ddf0307be9edfda69dcb2a8843e4dda66bf151d305a79ac8ec08ac77ab149f5acb9f55c5422c61a708a119f721fa5bf801655d98c2065472392ca7ee6c76165805f04f7bed1cb3af025246f8e6e1236b79be0667d0b11360cc8f1b1b66435b693eccbc3567e72981c56595274166d10bd34802f986621a2f333ee5962ccd97fdea98d27a674524ce1f58c", 0xeb}, {&(0x7f0000000b00)="f377da5ebcf1c5c84463d0b036a99b057da81c43bbe56aeac83a1b3b12537de1c7858cd0b7a15031a15b15fdef831ef3bf6962faa177aecf30d57b00bc45a601bd6950a98af0feaed5930326492d6f2900f83355c17d4d2f89c650a1f2ed09585223171cdcce712d8fc070f9de1a96b3c86de1b265462b48dcc1d6b31f9b06ae55659c2187ca0ed346b375e493aa538e8cd9496f0169879c11dfec65efcc54b286f179", 0xa3}], 0x9, &(0x7f0000000c80)=[@hopopts={{0xa0, 0x29, 0x36, {0x1d, 0x10, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x0, [0x1f]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x8001}, @calipso={0x7, 0x38, {0x3, 0xc, 0x3, 0xa6, [0x5, 0xffffffff, 0x3ff, 0x7fff, 0xffffffff, 0x8]}}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2}]}}}, @dstopts={{0x88, 0x29, 0x37, {0x29, 0xd, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x80, [0x6, 0x5, 0x1, 0x7, 0x6, 0x1]}}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x81}, @ra={0x5, 0x2, 0x1}, @pad1, @jumbo]}}}, @hopopts_2292={{0x1e0, 0x29, 0x36, {0x2, 0x38, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0xb7, 0x7, [0x0, 0x25bf, 0xd0e, 0x80000001, 0x9, 0x1, 0xa16, 0x3, 0x31810911]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x1ff, [0x1, 0x1, 0x7, 0xffffffff80000000, 0x100000000]}}, @ra, @generic={0x40, 0xd7, "f7a90902134e5de0ca84f722ae787ed0072ad723845f637b21e8751863a39cc83c84b561c9f566a64dc0750fd7f5507d3d4258eeddfe9e0e8c94f564a02de590cc87b21bd62ac58a912803830902fb32f1c0b394129e3afc3145780c0245f4d7404533af666db3dfa99bda4ebdfa9d1a6fa8afaff1154ad1a498342dd3b38a5f1bcc882b677d3dd2562b5acfb826a21b8720be9bb9cce7c5bda4b2b32141bfc5c40c82fd6ecffc900795cf7995c9ac96767b87e86364938d88fb38fa2d00f635fa6d7c2bb166d7ef0fbbba914efd8d0ca68db7e66c7358"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x5, [0x1b, 0x8, 0x200, 0x6, 0x4]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts={{0x78, 0x29, 0x36, {0x3b, 0xb, '\x00', [@generic={0x5, 0x54, "af82e75145da57997665dd48d75318479c2112850edc851b84c3166c8f555ac8422c029db4e7bf95c32ac2fe6fc6f9aa2303c87f5e11efd944d4a4c233c026284ee9c0c2f1b24979a6f9c10cc84917b00cb0ad53"}, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}], 0x398}}, {{&(0x7f0000001040)={0xa, 0x4e23, 0x9, @private1, 0x8}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001080)="dd9c52b1412c29ff6f7c533253beeafd6a7f520cb2ac927e642ea4d5a4f47bf40e24ea7010e255bc66899904ae19998c319f2231f9840a99e71506db3bc453a4299219530c6e2c489549133d3c346455157af09206c06275f5544d84825247d088e1bc9a1638afa025743c2627f6947016610021461414b37fa4510b275b8c95801daa2257d6c597b9bdf5d686a11dc552063b47ad0818f539667fe7f4c0d0d99dbe7e943f681e4a10067ec4cf130c37aa539fddbe2d6aba4cb004230730e3fdb2f34cfafb728860253e36249f29b9556f9fa71ef0ea9a1436a8dc211ba982e1adba4cd4ed310813b2f90b269a229410aee5883b680f943f9abb3a57ca3d05daedc5359ecd272a37228463078a22c99f0ae09885a202dfbe110eb64f639936f700af732a4cf8e041e4d1e1847e3fcecab208c105e0b99104ae7cd36aa9474dc65fe42a824dc60d35006452d931671f235d4f3534db2c2dc7016230d8fae0e718765739b65713425fe3c451de8c1821c066528d531192c097048a07c9ae232f8e9e1757361cb4903f65e67c411be3151ee47dabb7c9e48eab032d15dfeab416509fef304e28b4eab658b8126c06da08f6fd702fc35fa2722b69d833349268ebf54fffb6fe1661382325a06fc8356b8f430d5b4d2b491f9508019b5ed0f23d43dbaa1e228e6f36c4f1aead0eba69f2fd9a284adc5f5afc0d8d2e36bc22922978eed9f1128bd81df653d55de6fd553904fe8511c8fe1d2c381a10665908c9bde2f0c758c9584894b42937b807775c2ce24ea70c5f207dfee1e4e7641e43a27f17be026f348f4132764ea0f7ba7c791f94e4176de6c9fa691268d47d5c4b9f4d67fcbfb0007660042c9c4455948496e5dd5198c964eb62e991a68e8899f6d2080c2fe550c29d35664e27209d8eb6e347af602ec04851bb264d77556cc1b7056e883eb0fdd1b726f52d23f4166a52144f092cca9082370f8b29df0aa53d95be4eaa90d7ba0a46fc0e43979fa6fe5b2a26d901574f21fd122a15b8c877ac9624c2010f60b87da5020eb64ec6f672e472100395e1e666cf96882bfd582d94037a3acb9b58a7de1bc778461e94adfb8c359f61224278ced1b942d74304da80ed2d3937b6f2d10bc470a68c5d58478bf8318213528f6e77b942e2a9ebd114d92221de0d9008f4e14d52861193def38ab865368fc6a48bab9d9ed6711009db4e85b97ef982aa4d0cb4f125a035ec3785e66d68ec72dc5736a37840c23daafaa4f81dcddcde000cf3b0e4432a76786f0c1735a1d2bf38a655a356c76bfca3f40737fd300e0f4558429617c95c4edba745f31f2491e58de631ace453bd2f8525ef6532fb6780830346d94b52eb0da35c84c9ade00e11e2640d1bd8bca64721a770ad7e5ab57718ae863db2a36a7b9e44b8c87a39e0e68d0b70478a90b9ba7cdcd65c998860a38511348f83803e83b66b999bdd8230c90b886b3dbe3aa4aff6c7e18df52095b122f976e533f266fde373a2b659bc7c451140fd55e406af8ef9b6177e36745dbd70b2fde7ef07d45798e0ce43151e7836dae5543c495f1440ca9b151de2dd2468b7b71783ba952a466eefd9a3bfbd7d7e93734b29e02940b19c46404fa45059b4caa6af7e372d69faf5b1720124001b84ea5f2d70afc52811db97b3af974d60d52f6d3697d5cd150cf35e7081569115257d2b223dff293130cc38f3e540862150958e5d92b110ef018419a9864a104cff49e7efa9c2dcf879953d5256d1ba10f361a502438226e3c7e5b05d53f42ebae33861ff4163001bbfe760fcbe36027891e35ec3963db7b3aed0e62eebaba3b52a330849441bad604929f30058e98813078416ce684c01d14455f5220cb4ce22ec0143f6890f48aa2e75900ac6795bccddfe8fe5ff639a5576856b9b898e390a3fa4d781946f1b042d842de3487de0b9d1deb9011cb5907ea8edc6274bbc43ff67e18688d0c692d82e20eedd06ddf67370509e37bcd06c8798f9273f71d1b8a2e9224260f261e0183b0ecfd493df32902478ccad7ff7c0590605654f18e626130461da0bd46d46dd1fe841e42a005013bf7389e01363a05e1e68521f614e2cf9fea7cb31d5d3744e9afc2911c65326ee4c0c3d98d3eced5371e9a25588f8a479499ab748590aed2287bbece75b84033eff3c7bf7170ac04ef7672d531be2c8e70677150ba7e9fae739d3c04b60e61323382e7ae1949606ba03a5aebcad38f899f66c9131a724f349f3ebc6a2a16669463a9b8780a82c7ac348732d5884005a4159e86ed6708f1d55d1525bc83512eedc9050d9670515ae9fba981ec9c0cbadaac55949f7bf5659407570ce531c6b52f42260576bbbc22d8fbca2c3a537c3593c85b04df41bc37ffb804f10a575e62f76139b202950f93637b11cdd12eab258696b09cd08f7df0b0024a11a8332f60b8fcabc785dc66a988d4b0fc1e5a3e77ecfa732beb3c03da352fa64a8a1c3b2a7e0c3a4574a69033d6e434c6f2a36c76eabd9ac39ae479914ff2e089d51ecd55879a8b6d04f1e2620f916e62c6e3eed9929bb2b5eb9f6403bf01b2f5b1393a204197d94d4a7bcb7d9fc6b537d46967132136d201d23a4718f805041f7048e6749ecfa9c6fd5b3cd08ba2ea3491997cf214d7f9c9bc8e4a8473aaba86fec8f8778eb25b8ab04132743cc25b8804773d8c7190f98991d82b275f8c8ae9876b348dfb52edb28b144c1279d966a93db08eb8e3ef56556e17b046c5b044cac8a1e938f363a14964d58b618f580eceb9a34aef16e1aeb1db4996bfe63bcdfff2590cb6c2947240be9bd875db4eeeac9654075f67270504449245842c6ae3aecc8c39a5bee20466a7b842dc43c4b22a31a727b559103060549ac4a1c797d1320030a69579324a559b8a508f21b049458b53713e85dda82c2a5bd65043fe258ca566e8f01599c450b711c979f59586d4ebd61c09b02c149c6aa7a300573f995654499bd607f1faab8f01092c4006af29680fd33e09286b2e5c8e0a1f090761a8ba49d9b0e208afb93b2d2a4f73fa1d9fb8acf576f7f633ac353ee0e0e7ca0e604e12d87fcff478a7a2eb3896d799d776b46afabe1d621c00ccfd6370a1b895c0d34427232c8d97ce6ff0df5c8b5ce32a5318b78d5e91fa9ea06dc760bea48dcb420ac238a81bff35322c9480ab9fcdaa9bff13d753183901cca3f17c7d225bd3ee6d1926a18d2c8bb000c51e7fe6871e0248b1cd6e09e6e3a853e0328458b5bc81800a2f1682c232f5543e281ce955a260ab562d2c39cf1ad5098b10917bd1f188bac42a2b21953e0881055f2504ea33e6d3eec5ea88c5bf9ccaec0e99abe010e126f09a05ea618942faeb79f49bf68bf9b0b0868392b585800892591f3090743835555ac8849570103ef009b0776a288ca9237c5c94ce8b48af30e95136efdec8f2cd370ed1337e17f0ac70b7acf1d2c9a535f9a692064ae1e9f420abdba957cf9adf897dc729195c09cdff238bed275a50463bfb2657445caa8552f735e3e1e34b80464faa1cbadfe2d204231a3c92328f8743c9a1a5910d6d53e40d36795505c08d1f3a40cab42608b67b45d3db89846d25fd15f7d28a9370478adec4b15fcfeb71b5311f535bb923c57f9a93176f6fcc7f2110c544ad8c9c141463eae9480b6d5218c19e8a8da6bd8f565f70186845900a2b513035e9c04e0521ba08a3b6b01079ada7eeef7d77dfa73fc34bc621b818ec49aa465ab624079ca311d5ce06bc904639b8cde8511fe087c41968862bd7b963db3870b0bfdbe68f3407d5f41f9f7599391610f5859d1219268ed80bdba4d4fc7d53136d9e25cb0103a040f3562c657b3dfb914d855beb1644375af5115792c8e8a1e8e585975628d6f68534a771340128449adf827186fa094d14d59c9ed8c2783c734641e9b0c3c9de317a7aa50aff47484259587c35f43b7dd4bd2dbff07e9a71465197a199796823eba4aeddab80528abdc6428b72dcc2e7c1ef04687778c0573bae03b980847424185e597a31f5274d1ffa76da111ccfb4318575472f34b530faa04731982a0c88ab43f6d55eb6aba87dbbf5ea855c75184126a5ff71ede7a79ec287d158122b88890857a1c247f2dc7c89401a623fb98c67783eb212cd726387d8cd6a9af1193feb5a0ed69be39f0ccdaeb930d145b448e209daf37e3b73b1ebd092408910a2c26ef8fcf2957f0267b4acb099014505afa6dcfd06dcebfec0a126dd8dee442574c7df3d46bced917d375905b4976fd94e60bdb14094a05dcd03262831a2604b303ce39e9f5c0fc1496ff15e4296318b76d004342feb0495e94e9d3b326066a007273c7cc89f89fc61aa5fbd917f88ace411030f0f13d78b78d20212ed10c5c408cba3c25ff8cdb86a63e67de69b84b78e50aa80e8f175ced8e2a0f7d43e051a062d869b35c43e7f05fbaed65ff8037fe06434c863fb5bdca38b085f6622103b49d9a0f69161271ef70aea8bbb96d7bcceafe8681420e358b8211a05ec2e76939465af839c143b8f10fe058f7ae9f140895853afaee0b734cf32a76f0736030fccfca8c9fb7d1be362a1594861e7b8e3fe9880a115deef1948b27ac0b835b456db7dad899d5d16a4ccb8f236be15b26d9e0af3a6f6aa8816022df724fc43db67bf42704d36d9ddc67ec288c34a4ac8ef234c0898738bd952e4b70e172943a9e1cc6a2620a99b18f02736d3e92658a49e0b0c38940f91882bd5572ff713ca567f2218b88433004c2c2658547399d71a02e8de6832ab1270fa2ba0b5d03eba6562e8f8db5f9bd848be01223b1d3dd86972feb34b469bb46ebfb55783506fd950275b85130273e44dd68a69cd83c232f4f7fd28ee197e0a318e5aa50e940c300afbd51d09629a19483078b297f416f8ee3ad529eae6a2c0c96c79c1453717a4e689fbdd5f390e558c6fa28b2881f463bb2b50f3a2983bd954c37235392aa08413416cf6e032735dd1cb85d2028522f7ff30be53ac5f9c5acf7a3c95766cc1bf3ee248f819da42ea3994e3b0e7280631f81459c92d63bb625d9fa24f54d94c6afd9b5e1c390b2df28e41178167a7286e594988a9673d0d8599e9a14e0461d76a8e2965da397f40fd22f5633e5cd49e73a394efefd9f918e36e192f4c7096160a224a3fdc7cf79ebad3ca6a2d0f08766035dc32fd3cfb4a906e220c9e5d7d8d9488609a2b2003e615a0c05a150524dfe87634486e8412165b7fc6a88c8cba949806fdb390fb3e023bc29bf23112f53f90e7995c8fade2540fd8111319aa7c222c02e4585bc510bae14fcf682897952f2b14d6ee2095b3245a223ffabada9eb4049ef4f4f1ea340962f85bce6cc0e4b17830d1e1555f045366b699ecafd7eeb3a98b93a66dd73863d7d9e0783214f146c2ffb83aac97b8bb0a1f08d79b2fee6e0941b500f28318d0d755c030fb97c6b1054eec33decd4eda1d0bd70392522fecdcb524b72622f48a143a5692a384c27789d81c2469713029d91335236a63592869eb52e7502d00d2f6a9dcdbb80fcad0eee945864864f073680dc8816834385c10520246591dd68663909558d08773c63232836cd2bf2fa56e4186178a1c28ff2667a85cf0e2b7226277961f0cf01691aeaaffdc2bd3a6408325fe4ca81151bf94f3d09227ef39ba9ccde9335e36e8548b9f0197a3a260d519a0f526fb88f76e8f52605bf12319977220ac99c83eacd1a8fc8c2dd30b684e3ae142f0dd00cd14cc7415fefab7e92dab972f4c8493fee791d450cd81548a093d3453a1bd793c963d4cfb8589d5960e4769c183f02", 0x1000}, {&(0x7f0000002080)="92492a8b39acef235aac7f56a16384ad446bbd3241130acbbd891a916278517dc1d7", 0x22}, {&(0x7f00000020c0)="5cf5f599e66fc19005671a67c21043e33b41a536df6f61a92699b108e352c04c3e87320865c2c20815c25de7a4751bf4392e301b92549f91", 0x38}, {&(0x7f0000002100)="569daabad862b6c204d31e36d325eee445ba85da642001cc863b4b4746eaa9c92cb478826fa0baa807ba6e29f931620b3f8eacc49136251244d801b5bb087c1e56126cdcf1329da18ceca8790dbc47cdcfc392cb7b7887685da0b1a3c2058efd4b39acee01349751738d", 0x6a}, {&(0x7f0000002180)="02004d8a6b02d29010d941056d38413c2306e0c55c0959cdd1bf905ccba48f6f0b7bb142b1c2b4d09f03077647c6e9ed118d12e198492e79421ea816934b64ed7a08bb63801322864a76355b54180f4db3ea36fb3d1533", 0x57}, {&(0x7f0000002200)="7393a06a9111a5719716eb6cdabe6eebe395c359215f8f062dcd59f37bf1da4bfc8f0b747b3f7425174cabe162f0e2daffee8bcc7ac28fc395bca2100dea2103f9686efd5682fa9e8b6608001cee66bd9200d971f17cd871477f5a2a7a537ccf2545d575ee25a73f519f97f23214996da6eecdef85f840ca813f7a78feba5a98d6abe27ab1f14a1f6bf60690bebe75cf6c80bf18536551f8f5", 0x99}], 0x6, &(0x7f0000002400)=[@dontfrag={{0x14, 0x29, 0x3e, 0x28f7}}, @dstopts={{0x58, 0x29, 0x37, {0x3b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x8, 0x1c, "551dce7e874c697a8c6fef0187fdf4541b9ec1dd06ee387291c4e239"}, @pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff8}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x2e, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x800, [0x401, 0xdaa7, 0x1, 0xaa2, 0x2, 0x4]}}, @ra={0x5, 0x2, 0xa2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xa9589fc}}, @dstopts={{0x50, 0x29, 0x37, {0x89, 0x7, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xba, 0xe, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r8}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x210}}, {{&(0x7f00000026c0)={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000002700)="f129fe51d2d777a4c94541b71405be2e103f5767c32ff81f72646b850ca71f9b48756b966e2598cf5b9c52422f18bd8337af56997fd46aa7f42af96037ee27221ed3477c1f9edb605863d7f62ad527a0348d55b6ede18866ca53bfb6e9f3c85a5963b1b82a6ff04bce4ee2218f49c9ea4c7fd7802fbd09be77534a698fcc04f84b4102001a3a17b344f2e5955e982670b8a3b435cd1cdbbf8877dfb5adcf15b788fed44b301202f937e6e612c47002e55c7e27f8708bdd86462295322beb9225a351a4879a3ad741c6045c327ee0a0b3fd3d9a16f61f2e", 0xd7}], 0x1}}], 0x4, 0x4) r9 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r9, 0x0, r4, 0x0, 0x10001, 0x0) mkdirat(r9, &(0x7f0000000040)='./file1\x00', 0x1a5) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e22, 0x8, @loopback, 0x5}, 0x1c) 20:28:14 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x7af4, &(0x7f0000000000)={0x0, 0x6dee, 0x1, 0x2, 0x1c3, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={r5, r6+10000000}, 0x1, 0x0, 0x0, {0x0, r7}}, 0x156) io_uring_enter(r0, 0x44d5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:28:14 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) io_uring_enter(r0, 0x0, 0x904, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x12, 0x0, 0x0) 20:28:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xbc3, 0x1, &(0x7f0000000340)="50c391e0927c671efc98567292800d4ddd83b8dc96444269c1b80b4faf222ec4b69e89058479e012e01856d1486f50f515cf2197a4b529230dbbace1f22b9db73479100fe97184978c2e57a9b6b3c45fa22837a5ef1b2263c3ba4ba246b7c767c12bab44e460537dfab0947933fad141beb7d58bbc615544ebc18a794142", 0xd301, 0x0, 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) inotify_rm_watch(0xffffffffffffffff, r1) ioctl$FIOCLEX(r5, 0x5451) close(r5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r5, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8000, 0x0, 0x2, 0x3}, 0x8) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x10000, 0x0, 0xee6c, 0x2}) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:28:14 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x6) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:28:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8711, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff}, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/node', 0x0, 0x102) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:28:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usb_storage', 0x20000, 0x83) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:28:14 executing program 3: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}, 0x0) io_uring_enter(r0, 0x44d5, 0x904, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20d315) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0xc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 20:28:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x410, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x3ff, 0x4) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) 20:28:15 executing program 2: perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x17) 20:28:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @loopback, 0x3f}, 0x1c) fallocate(r2, 0x3, 0x52, 0x6) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x950) r4 = syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x7f, 0x9, 0x0, 0x0, 0x2947, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0x7, 0xfc9, 0x2, 0x2, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x5}, 0x0, 0xe, r2, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r6, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0x5e, 0x3ff03) 20:28:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r2 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) copy_file_range(r2, &(0x7f0000000140)=0x4, r1, &(0x7f0000000180)=0x4, 0x800, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) fcntl$setpipe(r3, 0x407, 0x4) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x0) [ 2583.661708] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2583.663070] CPU: 0 PID: 255 Comm: syz-fuzzer Not tainted 5.10.197 #1 [ 2583.663713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2583.664548] Call Trace: [ 2583.664849] dump_stack+0x107/0x167 [ 2583.665219] dump_header+0x106/0x65e [ 2583.665607] oom_kill_process.cold+0x10/0x15 [ 2583.666070] out_of_memory+0x1149/0x1440 [ 2583.666485] ? oom_killer_disable+0x280/0x280 [ 2583.666945] ? mutex_trylock+0x237/0x2b0 [ 2583.667354] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2583.667991] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2583.668645] ? lock_acquire+0x107/0x470 [ 2583.669059] ? warn_alloc+0x190/0x190 [ 2583.669484] __alloc_pages_nodemask+0x51d/0x600 [ 2583.669972] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2583.670577] ? find_get_entry+0x2c8/0x740 [ 2583.671002] alloc_pages_current+0x187/0x280 [ 2583.671447] __page_cache_alloc+0x2d2/0x360 [ 2583.671916] pagecache_get_page+0x2c7/0xc80 [ 2583.672386] filemap_fault+0x177d/0x2210 [ 2583.672827] ? read_cache_page_gfp+0x30/0x30 [ 2583.673301] ? replace_page_cache_page+0x1200/0x1200 [ 2583.673849] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2583.674415] ext4_filemap_fault+0x87/0xc0 [ 2583.674863] __do_fault+0x113/0x410 [ 2583.675257] handle_mm_fault+0x1e53/0x3500 [ 2583.675709] ? ep_read_events_proc+0x3d0/0x3d0 [ 2583.676194] ? __pmd_alloc+0x5e0/0x5e0 [ 2583.676630] ? vmacache_find+0x55/0x2a0 [ 2583.677058] ? vmacache_update+0xce/0x140 [ 2583.677512] do_user_addr_fault+0x56e/0xc60 [ 2583.677988] exc_page_fault+0xa2/0x1a0 [ 2583.678409] ? asm_exc_page_fault+0x8/0x30 [ 2583.678856] asm_exc_page_fault+0x1e/0x30 [ 2583.679285] RIP: 0033:0x4666e0 [ 2583.679639] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 2583.680291] RSP: 002b:000000c0000417f0 EFLAGS: 00010246 [ 2583.680854] RAX: 0000000000000000 RBX: 00000000000003e1 RCX: 00000000004666e0 [ 2583.681648] RDX: 0000000000000080 RSI: 000000c000041840 RDI: 0000000000000003 [ 2583.682412] RBP: 000000c000041e40 R08: 0000000000000000 R09: 0000000000000000 [ 2583.683195] R10: 00000000000003e1 R11: 0000000000000246 R12: 0000000000000003 [ 2583.683958] R13: 000000c000000900 R14: 000002598b434aa1 R15: 000080c007d3bfff [ 2583.684840] Mem-Info: [ 2583.685118] active_anon:3728 inactive_anon:66719 isolated_anon:0 [ 2583.685118] active_file:2 inactive_file:2 isolated_file:0 [ 2583.685118] unevictable:0 dirty:0 writeback:0 [ 2583.685118] slab_reclaimable:9416 slab_unreclaimable:252450 [ 2583.685118] mapped:69634 shmem:136 pagetables:1843 bounce:0 [ 2583.685118] free:2912 free_pcp:108 free_cma:0 [ 2583.688496] Node 0 active_anon:14912kB inactive_anon:266876kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:544kB writeback_tmp:0kB kernel_stack:4768kB all_unreclaimable? yes [ 2583.690881] Node 0 DMA free:6480kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2583.693595] lowmem_reserve[]: 0 1616 1616 1616 [ 2583.694098] Node 0 DMA32 free:5168kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:14912kB inactive_anon:266876kB active_file:84kB inactive_file:84kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:7372kB bounce:0kB free_pcp:432kB local_pcp:212kB free_cma:0kB [ 2583.697478] lowmem_reserve[]: 0 0 0 0 [ 2583.697917] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2583.699365] Node 0 DMA32: 772*4kB (UME) 168*8kB (UME) 45*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5152kB [ 2583.700779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2583.701704] 163 total pagecache pages [ 2583.702108] 0 pages in swap cache [ 2583.702502] Swap cache stats: add 0, delete 0, find 0/0 [ 2583.703059] Free swap = 0kB [ 2583.703397] Total swap = 0kB [ 2583.703720] 524158 pages RAM [ 2583.704048] 0 pages HighMem/MovableOnly [ 2583.704491] 105056 pages reserved [ 2583.704901] Unreclaimable slab info: [ 2583.705691] Name Used Total [ 2583.706327] pid_3 7KB 7KB [ 2583.706885] pid_2 78KB 78KB [ 2583.707465] IEEE-802.15.4-MAC 63KB 63KB [ 2583.708041] IEEE-802.15.4-RAW 63KB 63KB [ 2583.708640] p9_req_t 8KB 8KB [ 2583.709203] ip6-frags 15KB 15KB [ 2583.709793] fib6_nodes 28KB 28KB [ 2583.710373] ip6_dst_cache 41KB 41KB [ 2583.710937] PINGv6 63KB 63KB [ 2583.711514] RAWv6 315KB 315KB [ 2583.712075] UDPLITEv6 62KB 62KB [ 2583.712667] UDPv6 62KB 62KB [ 2583.713242] tw_sock_TCPv6 15KB 15KB [ 2583.713841] request_sock_TCPv6 15KB 15KB [ 2583.714436] TCPv6 62KB 62KB [ 2583.715006] scsi_sense_cache 8KB 8KB [ 2583.715580] sd_ext_cdb 3KB 3KB [ 2583.716142] virtio_scsi_cmd 16KB 16KB [ 2583.716739] sgpool-128 59KB 59KB [ 2583.717334] sgpool-64 63KB 63KB [ 2583.717898] sgpool-32 63KB 63KB [ 2583.718476] sgpool-16 135KB 135KB [ 2583.719043] sgpool-8 15KB 37KB [ 2583.719629] io_kiocb 525KB 525KB [ 2583.720201] mqueue_inode_cache 62KB 62KB [ 2583.720788] nfs_commit_data 15KB 15KB [ 2583.721374] nfs_write_data 47KB 47KB [ 2583.721955] jbd2_inode 11KB 11KB [ 2583.722546] ext4_system_zone 7KB 7KB [ 2583.723112] ext4_io_end_vec 7KB 7KB [ 2583.723690] ext4_bio_post_read_ctx 15KB 15KB [ 2583.724319] kioctx 31KB 31KB [ 2583.724889] aio_kiocb 7KB 7KB [ 2583.725474] dio 30KB 30KB [ 2583.726051] bio-2 4KB 4KB [ 2583.726641] fasync_cache 7KB 7KB [ 2583.727203] pid_namespace 7KB 7KB [ 2583.727778] posix_timers_cache 15KB 15KB [ 2583.728377] rpc_buffers 31KB 31KB [ 2583.728962] rpc_tasks 3KB 3KB [ 2583.729565] UNIX 314KB 352KB [ 2583.730143] UDP-Lite 63KB 63KB [ 2583.730727] tcp_bind_bucket 8KB 8KB [ 2583.731320] inet_peer_cache 8KB 8KB [ 2583.731885] xfrm_state 32KB 32KB [ 2583.732478] ip_fib_trie 8KB 8KB [ 2583.733054] ip_fib_alias 15KB 15KB [ 2583.733655] ip_dst_cache 56KB 56KB [ 2583.734225] PING 31KB 31KB [ 2583.734814] RAW 93KB 93KB [ 2583.735404] UDP 173KB 346KB [ 2583.735975] tw_sock_TCP 7KB 7KB [ 2583.736563] request_sock_TCP 15KB 15KB [ 2583.737129] TCP 60KB 60KB [ 2583.737717] hugetlbfs_inode_cache 30KB 30KB [ 2583.738323] bio-1 11KB 11KB [ 2583.738892] eventpoll_pwq 23KB 23KB [ 2583.739485] eventpoll_epi 43KB 43KB [ 2583.740043] inotify_inode_mark 35KB 35KB [ 2583.740643] request_queue 60KB 60KB [ 2583.741211] blkdev_ioc 33KB 33KB [ 2583.741849] bio-0 90KB 116KB [ 2583.742425] biovec-max 654KB 743KB [ 2583.743009] biovec-64 220KB 220KB [ 2583.743593] biovec-16 45KB 60KB [ 2583.744175] user_namespace 31KB 31KB [ 2583.744756] uid_cache 8KB 8KB [ 2583.745359] dmaengine-unmap-2 4KB 4KB [ 2583.745931] audit_buffer 7KB 7KB [ 2583.746535] skbuff_fclone_cache 105KB 105KB [ 2583.747116] skbuff_head_cache 1170KB 1170KB [ 2583.747716] file_lock_cache 51KB 51KB [ 2583.748282] file_lock_ctx 7KB 7KB [ 2583.748855] fsnotify_mark_connector 16KB 16KB [ 2583.749517] net_namespace 172KB 172KB [ 2583.750097] task_delay_info 79KB 111KB [ 2583.750703] taskstats 69KB 69KB [ 2583.751276] proc_dir_entry 523KB 540KB [ 2583.751874] pde_opener 35KB 35KB [ 2583.752459] seq_file 56KB 56KB [ 2583.753051] sigqueue 129KB 129KB [ 2583.753647] shmem_inode_cache 1293KB 1383KB [ 2583.754231] kernfs_iattrs_cache 239KB 239KB [ 2583.754834] kernfs_node_cache 6409KB 6432KB [ 2583.755440] mnt_cache 253KB 259KB [ 2583.756021] filp 998KB 1575KB [ 2583.756643] names_cache 4335KB 5146KB [ 2583.757223] hashtab_node 278KB 278KB [ 2583.757824] ebitmap_node 1149KB 1149KB [ 2583.758429] avtab_node 4976KB 4976KB [ 2583.759003] avc_node 39KB 39KB [ 2583.759608] lsm_inode_cache 3314KB 3360KB [ 2583.760178] lsm_file_cache 184KB 184KB [ 2583.760774] key_jar 31KB 31KB [ 2583.761366] uts_namespace 15KB 15KB [ 2583.761966] nsproxy 11KB 11KB [ 2583.762573] vm_area_struct 1016KB 1272KB [ 2583.763153] fs_cache 56KB 56KB [ 2583.763731] files_cache 276KB 302KB [ 2583.764337] signal_cache 359KB 432KB [ 2583.764894] sighand_cache 358KB 390KB [ 2583.765495] task_struct 1260KB 1680KB [ 2583.766076] cred_jar 115KB 152KB [ 2583.766682] anon_vma_chain 234KB 303KB [ 2583.767259] anon_vma 296KB 310KB [ 2583.767850] pid 91KB 101KB [ 2583.768451] Acpi-Operand 215KB 249KB [ 2583.769037] Acpi-ParseExt 27KB 27KB [ 2583.769642] Acpi-Parse 154KB 169KB [ 2583.770233] Acpi-State 86KB 102KB [ 2583.770844] Acpi-Namespace 24KB 24KB [ 2583.771447] numa_policy 7KB 7KB [ 2583.772031] trace_event_file 163KB 163KB [ 2583.772617] ftrace_event_field 280KB 280KB [ 2583.773206] pool_workqueue 48KB 48KB [ 2583.773806] task_group 16KB 16KB [ 2583.774419] mm_struct 266KB 378KB [ 2583.775001] vmap_area 125KB 161KB [ 2583.775609] page->ptl 200KB 283KB [ 2583.776192] kmemleak_scan_area 119KB 147KB [ 2583.776788] kmemleak_object 773457KB 773457KB [ 2583.777409] kmalloc-8k 4880KB 5024KB [ 2583.778003] kmalloc-4k 7224KB 8512KB [ 2583.778602] kmalloc-2k 5528KB 5920KB [ 2583.779198] kmalloc-1k 2638KB 3616KB [ 2583.779800] kmalloc-512 28340KB 28340KB [ 2583.780401] kmalloc-256 1474KB 1592KB [ 2583.780989] kmalloc-192 678KB 696KB [ 2583.781599] kmalloc-128 537KB 628KB [ 2583.782196] kmalloc-96 561KB 836KB [ 2583.782825] kmalloc-64 1314KB 1804KB [ 2583.783419] kmalloc-32 91644KB 91644KB [ 2583.784005] kmalloc-16 361KB 368KB [ 2583.784599] kmalloc-8 334KB 334KB [ 2583.785175] kmem_cache_node 47KB 47KB [ 2583.785781] kmem_cache 75KB 75KB [ 2583.786391] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=255,uid=0 [ 2583.789235] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1241664kB, anon-rss:244660kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:948kB oom_score_adj:0 [ 2584.054285] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2584.055484] CPU: 0 PID: 178 Comm: in:imklog Not tainted 5.10.197 #1 [ 2584.056172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.057078] Call Trace: [ 2584.057390] dump_stack+0x107/0x167 [ 2584.057808] dump_header+0x106/0x65e [ 2584.058211] oom_kill_process.cold+0x10/0x15 [ 2584.058694] out_of_memory+0x1149/0x1440 [ 2584.059144] ? oom_killer_disable+0x280/0x280 [ 2584.059634] ? mutex_trylock+0x237/0x2b0 [ 2584.060080] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2584.060723] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2584.061365] ? lock_acquire+0x107/0x470 [ 2584.061813] ? warn_alloc+0x190/0x190 [ 2584.062255] __alloc_pages_nodemask+0x51d/0x600 [ 2584.062758] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2584.063419] ? find_get_entry+0x2c8/0x740 [ 2584.063875] alloc_pages_current+0x187/0x280 [ 2584.064352] __page_cache_alloc+0x2d2/0x360 [ 2584.064818] pagecache_get_page+0x2c7/0xc80 [ 2584.065286] filemap_fault+0x177d/0x2210 [ 2584.065759] ? read_cache_page_gfp+0x30/0x30 [ 2584.066265] ? replace_page_cache_page+0x1200/0x1200 [ 2584.066821] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2584.067410] ext4_filemap_fault+0x87/0xc0 [ 2584.067862] __do_fault+0x113/0x410 [ 2584.068267] handle_mm_fault+0x1e53/0x3500 [ 2584.068732] ? fsnotify+0xf50/0xf50 [ 2584.069134] ? __pmd_alloc+0x5e0/0x5e0 [ 2584.069575] ? vmacache_find+0x55/0x2a0 [ 2584.070007] ? vmacache_update+0xce/0x140 [ 2584.070468] do_user_addr_fault+0x56e/0xc60 [ 2584.070949] exc_page_fault+0xa2/0x1a0 [ 2584.071375] ? asm_exc_page_fault+0x8/0x30 [ 2584.071843] asm_exc_page_fault+0x1e/0x30 [ 2584.072292] RIP: 0033:0x7fdb316d908c [ 2584.072701] Code: Unable to access opcode bytes at RIP 0x7fdb316d9062. [ 2584.073416] RSP: 002b:00007fdb30c754d0 EFLAGS: 00010246 [ 2584.074009] RAX: 000000000000136c RBX: 0000000000000000 RCX: 00007fdb316d908c [ 2584.074787] RDX: 0000000000001fa0 RSI: 00007fdb30c75d00 RDI: 0000000000000005 [ 2584.075554] RBP: 000056122ac1a4c0 R08: 0000000000000000 R09: 000056122ac16e88 [ 2584.076331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb30c75d00 [ 2584.077098] R13: 0000000000001fa0 R14: 00007fdb30c75d00 R15: 00007fdb30c75d3d [ 2584.077945] Mem-Info: [ 2584.078232] active_anon:3728 inactive_anon:66577 isolated_anon:0 [ 2584.078232] active_file:5 inactive_file:0 isolated_file:0 [ 2584.078232] unevictable:0 dirty:0 writeback:0 [ 2584.078232] slab_reclaimable:9416 slab_unreclaimable:252547 [ 2584.078232] mapped:52414 shmem:136 pagetables:1781 bounce:0 [ 2584.078232] free:3026 free_pcp:242 free_cma:0 [ 2584.081625] Node 0 active_anon:14912kB inactive_anon:266308kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209656kB dirty:0kB writeback:0kB shmem:544kB writeback_tmp:0kB kernel_stack:4416kB all_unreclaimable? yes [ 2584.084085] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2584.086883] lowmem_reserve[]: 0 1616 1616 1616 [ 2584.087425] Node 0 DMA32 free:5632kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:14912kB inactive_anon:266308kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:7124kB bounce:0kB free_pcp:968kB local_pcp:528kB free_cma:0kB [ 2584.090505] lowmem_reserve[]: 0 0 0 0 [ 2584.090946] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2584.092367] Node 0 DMA32: 772*4kB (UME) 170*8kB (UME) 45*16kB (M) 17*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5712kB [ 2584.093865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2584.094790] 141 total pagecache pages [ 2584.095207] 0 pages in swap cache [ 2584.095609] Swap cache stats: add 0, delete 0, find 0/0 [ 2584.096184] Free swap = 0kB [ 2584.096538] Total swap = 0kB [ 2584.096869] 524158 pages RAM [ 2584.097196] 0 pages HighMem/MovableOnly [ 2584.097667] 105056 pages reserved [ 2584.098040] Unreclaimable slab info: [ 2584.098459] Name Used Total [ 2584.099051] pid_3 7KB 7KB [ 2584.099656] pid_2 78KB 78KB [ 2584.100232] IEEE-802.15.4-MAC 63KB 63KB [ 2584.100833] IEEE-802.15.4-RAW 63KB 63KB [ 2584.101434] p9_req_t 8KB 8KB [ 2584.102013] ip6-frags 15KB 15KB [ 2584.102613] fib6_nodes 28KB 28KB [ 2584.103188] ip6_dst_cache 41KB 41KB [ 2584.103788] PINGv6 63KB 63KB [ 2584.104398] RAWv6 315KB 315KB [ 2584.104987] UDPLITEv6 62KB 62KB [ 2584.105598] UDPv6 62KB 62KB [ 2584.106180] tw_sock_TCPv6 15KB 15KB [ 2584.106787] request_sock_TCPv6 15KB 15KB [ 2584.107402] TCPv6 62KB 62KB [ 2584.107985] scsi_sense_cache 8KB 8KB [ 2584.108600] sd_ext_cdb 3KB 3KB [ 2584.109177] virtio_scsi_cmd 16KB 16KB [ 2584.109820] sgpool-128 59KB 59KB [ 2584.110422] sgpool-64 63KB 63KB [ 2584.110993] sgpool-32 63KB 63KB [ 2584.111601] sgpool-16 135KB 135KB [ 2584.112188] sgpool-8 15KB 37KB [ 2584.112779] io_kiocb 525KB 525KB [ 2584.113366] mqueue_inode_cache 62KB 62KB [ 2584.113948] nfs_commit_data 15KB 15KB [ 2584.114550] nfs_write_data 47KB 47KB [ 2584.115117] jbd2_inode 11KB 11KB [ 2584.115705] ext4_system_zone 7KB 7KB [ 2584.116271] ext4_io_end_vec 7KB 7KB [ 2584.116877] ext4_bio_post_read_ctx 15KB 15KB [ 2584.117527] kioctx 31KB 31KB [ 2584.118123] aio_kiocb 7KB 7KB [ 2584.118729] dio 30KB 30KB [ 2584.119318] bio-2 4KB 4KB [ 2584.119900] fasync_cache 7KB 7KB [ 2584.120525] pid_namespace 7KB 7KB [ 2584.121134] posix_timers_cache 15KB 15KB [ 2584.121771] rpc_buffers 31KB 31KB [ 2584.122393] rpc_tasks 3KB 3KB [ 2584.122977] UNIX 314KB 352KB [ 2584.123605] UDP-Lite 63KB 63KB [ 2584.124204] tcp_bind_bucket 8KB 8KB [ 2584.124826] inet_peer_cache 8KB 8KB [ 2584.125439] xfrm_state 32KB 32KB [ 2584.126038] ip_fib_trie 8KB 8KB [ 2584.126651] ip_fib_alias 15KB 15KB [ 2584.127246] ip_dst_cache 56KB 56KB [ 2584.127860] PING 31KB 31KB [ 2584.128473] RAW 93KB 93KB [ 2584.129066] UDP 173KB 346KB [ 2584.129687] tw_sock_TCP 7KB 7KB [ 2584.130276] request_sock_TCP 15KB 15KB [ 2584.130885] TCP 60KB 60KB [ 2584.131498] hugetlbfs_inode_cache 30KB 30KB [ 2584.132134] bio-1 11KB 11KB [ 2584.132743] eventpoll_pwq 23KB 23KB [ 2584.133355] eventpoll_epi 43KB 43KB [ 2584.133958] inotify_inode_mark 35KB 35KB [ 2584.134596] request_queue 60KB 60KB [ 2584.135175] blkdev_ioc 33KB 33KB [ 2584.135794] bio-0 90KB 116KB [ 2584.136403] biovec-max 654KB 743KB [ 2584.136996] biovec-64 220KB 220KB [ 2584.137618] biovec-16 45KB 60KB [ 2584.138216] user_namespace 31KB 31KB [ 2584.138826] uid_cache 8KB 8KB [ 2584.139441] dmaengine-unmap-2 4KB 4KB [ 2584.140035] audit_buffer 7KB 7KB [ 2584.140643] skbuff_fclone_cache 105KB 105KB [ 2584.141251] skbuff_head_cache 1203KB 1203KB [ 2584.141868] file_lock_cache 51KB 51KB [ 2584.142478] file_lock_ctx 7KB 7KB [ 2584.143072] fsnotify_mark_connector 16KB 16KB [ 2584.143742] net_namespace 172KB 172KB [ 2584.144357] task_delay_info 79KB 111KB [ 2584.144954] taskstats 69KB 69KB [ 2584.145586] proc_dir_entry 523KB 540KB [ 2584.146188] pde_opener 35KB 35KB [ 2584.146807] seq_file 56KB 56KB [ 2584.147426] sigqueue 129KB 129KB [ 2584.148016] shmem_inode_cache 1293KB 1383KB [ 2584.148620] kernfs_iattrs_cache 239KB 239KB [ 2584.149235] kernfs_node_cache 6409KB 6432KB [ 2584.149831] mnt_cache 253KB 259KB [ 2584.150452] filp 998KB 1575KB [ 2584.151026] names_cache 4335KB 5146KB [ 2584.151644] hashtab_node 278KB 278KB [ 2584.152212] ebitmap_node 1149KB 1149KB [ 2584.152824] avtab_node 4976KB 4976KB [ 2584.153419] avc_node 39KB 39KB [ 2584.154026] lsm_inode_cache 3314KB 3360KB [ 2584.154638] lsm_file_cache 184KB 184KB [ 2584.155231] key_jar 31KB 31KB [ 2584.155840] uts_namespace 15KB 15KB [ 2584.156452] nsproxy 11KB 11KB [ 2584.157052] vm_area_struct 1016KB 1272KB [ 2584.157666] fs_cache 56KB 56KB [ 2584.158238] files_cache 276KB 302KB [ 2584.158852] signal_cache 359KB 432KB [ 2584.159448] sighand_cache 358KB 390KB [ 2584.160044] task_struct 1260KB 1680KB [ 2584.160652] cred_jar 115KB 152KB [ 2584.161245] anon_vma_chain 234KB 303KB [ 2584.161876] anon_vma 276KB 302KB [ 2584.162493] pid 91KB 101KB [ 2584.163087] Acpi-Operand 215KB 249KB [ 2584.163698] Acpi-ParseExt 27KB 27KB [ 2584.164317] Acpi-Parse 154KB 169KB [ 2584.164908] Acpi-State 86KB 102KB [ 2584.165517] Acpi-Namespace 24KB 24KB [ 2584.166100] numa_policy 7KB 7KB [ 2584.166707] trace_event_file 163KB 163KB [ 2584.167277] ftrace_event_field 280KB 280KB [ 2584.167893] pool_workqueue 48KB 48KB [ 2584.168481] task_group 16KB 16KB [ 2584.169068] mm_struct 266KB 378KB [ 2584.169669] vmap_area 125KB 161KB [ 2584.170240] page->ptl 200KB 283KB [ 2584.170853] kmemleak_scan_area 119KB 147KB [ 2584.171451] kmemleak_object 773639KB 773639KB [ 2584.172052] kmalloc-8k 4880KB 5024KB [ 2584.172644] kmalloc-4k 7224KB 8512KB [ 2584.173242] kmalloc-2k 5528KB 5920KB [ 2584.173853] kmalloc-1k 2638KB 3616KB [ 2584.174462] kmalloc-512 28456KB 28456KB [ 2584.175037] kmalloc-256 1474KB 1592KB [ 2584.175654] kmalloc-192 678KB 696KB [ 2584.176248] kmalloc-128 537KB 628KB [ 2584.176870] kmalloc-96 565KB 836KB [ 2584.177494] kmalloc-64 1328KB 1804KB [ 2584.178104] kmalloc-32 91644KB 91644KB [ 2584.178723] kmalloc-16 361KB 368KB [ 2584.179339] kmalloc-8 334KB 334KB [ 2584.179936] kmem_cache_node 47KB 47KB [ 2584.180548] kmem_cache 75KB 75KB [ 2584.181142] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0 [ 2584.182927] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:740kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2585.232905] oom_reaper: reaped process 12940 (syz-executor.7), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2592.638513] systemd-timesyn invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2592.639711] CPU: 1 PID: 128 Comm: systemd-timesyn Not tainted 5.10.197 #1 [ 2592.640449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.641343] Call Trace: [ 2592.641633] dump_stack+0x107/0x167 [ 2592.642055] dump_header+0x106/0x65e [ 2592.642468] oom_kill_process.cold+0x10/0x15 [ 2592.642947] out_of_memory+0x1149/0x1440 [ 2592.643387] ? oom_killer_disable+0x280/0x280 [ 2592.643888] ? mutex_trylock+0x237/0x2b0 [ 2592.644320] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2592.644971] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2592.645610] ? lock_acquire+0x107/0x470 [ 2592.646042] ? warn_alloc+0x190/0x190 [ 2592.646469] __alloc_pages_nodemask+0x51d/0x600 [ 2592.646973] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2592.647630] ? find_get_entry+0x2c8/0x740 [ 2592.648095] alloc_pages_current+0x187/0x280 [ 2592.648593] __page_cache_alloc+0x2d2/0x360 [ 2592.649090] pagecache_get_page+0x2c7/0xc80 [ 2592.649573] filemap_fault+0x177d/0x2210 [ 2592.650034] ? read_cache_page_gfp+0x30/0x30 [ 2592.650540] ? replace_page_cache_page+0x1200/0x1200 [ 2592.651101] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2592.651687] ext4_filemap_fault+0x87/0xc0 [ 2592.652137] __do_fault+0x113/0x410 [ 2592.652551] handle_mm_fault+0x1e53/0x3500 [ 2592.653025] ? timerfd_tmrproc+0xc0/0xc0 [ 2592.653474] ? find_held_lock+0x2c/0x110 [ 2592.653948] ? __pmd_alloc+0x5e0/0x5e0 [ 2592.654380] ? vmacache_find+0x55/0x2a0 [ 2592.654833] do_user_addr_fault+0x56e/0xc60 [ 2592.655319] exc_page_fault+0xa2/0x1a0 [ 2592.655752] ? asm_exc_page_fault+0x8/0x30 [ 2592.656227] asm_exc_page_fault+0x1e/0x30 [ 2592.656685] RIP: 0033:0x7f8bd28d2250 [ 2592.657098] Code: Unable to access opcode bytes at RIP 0x7f8bd28d2226. [ 2592.657825] RSP: 002b:00007ffcd1c76c68 EFLAGS: 00010202 [ 2592.658419] RAX: 0000000000000000 RBX: 00005557802bf3a8 RCX: 00000000000003cf [ 2592.659204] RDX: 00005557802bf3a8 RSI: 0000000000000000 RDI: 00005557802b92f0 [ 2592.660000] RBP: 00005557802b92f0 R08: 0000000000000000 R09: 00007ffcd1d2c080 [ 2592.660792] R10: 00007ffcd1d2c0f0 R11: 0000000000000000 R12: 000000009a8358dc [ 2592.661591] R13: 00005557802bf370 R14: 00007ffcd1c76d10 R15: 000000000000000c [ 2592.662482] Mem-Info: [ 2592.662768] active_anon:33 inactive_anon:6898 isolated_anon:0 [ 2592.662768] active_file:1 inactive_file:0 isolated_file:0 [ 2592.662768] unevictable:0 dirty:0 writeback:0 [ 2592.662768] slab_reclaimable:6931 slab_unreclaimable:385281 [ 2592.662768] mapped:8732 shmem:70 pagetables:230 bounce:0 [ 2592.662768] free:2869 free_pcp:61 free_cma:0 [ 2592.666174] Node 0 active_anon:132kB inactive_anon:27592kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34928kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:3072kB all_unreclaimable? yes [ 2592.668671] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2592.671602] lowmem_reserve[]: 0 1616 1616 1616 [ 2592.672133] Node 0 DMA32 free:4984kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:132kB inactive_anon:27592kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:920kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 2592.675229] lowmem_reserve[]: 0 0 0 0 [ 2592.675686] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB [ 2592.677230] Node 0 DMA32: 1280*4kB (UM) 13*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5224kB [ 2592.678682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2592.679632] 98 total pagecache pages [ 2592.680050] 0 pages in swap cache [ 2592.680445] Swap cache stats: add 0, delete 0, find 0/0 [ 2592.681034] Free swap = 0kB [ 2592.681386] Total swap = 0kB [ 2592.681725] 524158 pages RAM [ 2592.682047] 0 pages HighMem/MovableOnly [ 2592.682488] 105056 pages reserved [ 2592.682859] Unreclaimable slab info: [ 2592.683250] Name Used Total [ 2592.683867] pid_3 7KB 7KB [ 2592.684450] pid_2 78KB 78KB [ 2592.685015] IEEE-802.15.4-MAC 63KB 63KB [ 2592.685604] IEEE-802.15.4-RAW 63KB 63KB [ 2592.686176] p9_req_t 8KB 8KB [ 2592.686772] ip6-frags 15KB 15KB [ 2592.687383] fib6_nodes 28KB 28KB [ 2592.687970] ip6_dst_cache 41KB 41KB [ 2592.688578] PINGv6 63KB 63KB [ 2592.689174] RAWv6 315KB 315KB [ 2592.689795] UDPLITEv6 62KB 62KB [ 2592.690404] UDPv6 62KB 62KB [ 2592.690988] tw_sock_TCPv6 15KB 15KB [ 2592.691593] request_sock_TCPv6 15KB 15KB [ 2592.692210] TCPv6 62KB 62KB [ 2592.692821] scsi_sense_cache 8KB 8KB [ 2592.693434] sd_ext_cdb 3KB 3KB [ 2592.694036] virtio_scsi_cmd 16KB 16KB [ 2592.694656] sgpool-128 59KB 59KB [ 2592.695245] sgpool-64 63KB 63KB [ 2592.695857] sgpool-32 141KB 141KB [ 2592.696464] sgpool-16 135KB 135KB [ 2592.697066] sgpool-8 30KB 37KB [ 2592.697693] io_kiocb 525KB 525KB [ 2592.698284] mqueue_inode_cache 62KB 62KB [ 2592.698894] nfs_commit_data 15KB 15KB [ 2592.699514] nfs_write_data 47KB 47KB [ 2592.700112] jbd2_inode 11KB 11KB [ 2592.700718] ext4_system_zone 7KB 7KB [ 2592.701336] ext4_io_end_vec 7KB 7KB [ 2592.701932] ext4_bio_post_read_ctx 15KB 15KB [ 2592.702593] kioctx 31KB 31KB [ 2592.703195] aio_kiocb 7KB 7KB [ 2592.703810] dio 30KB 30KB [ 2592.704415] bio-2 4KB 4KB [ 2592.705000] fasync_cache 7KB 7KB [ 2592.705606] pid_namespace 7KB 7KB [ 2592.706218] posix_timers_cache 15KB 15KB [ 2592.706839] rpc_buffers 31KB 31KB [ 2592.707456] rpc_tasks 3KB 3KB [ 2592.708053] UNIX 326KB 352KB [ 2592.708670] UDP-Lite 63KB 63KB [ 2592.709273] tcp_bind_bucket 8KB 8KB [ 2592.709893] inet_peer_cache 8KB 8KB [ 2592.710512] xfrm_state 32KB 32KB [ 2592.711107] ip_fib_trie 8KB 8KB [ 2592.711727] ip_fib_alias 15KB 15KB [ 2592.712326] ip_dst_cache 56KB 56KB [ 2592.712924] PING 31KB 31KB [ 2592.713538] RAW 93KB 93KB [ 2592.714139] UDP 171KB 346KB [ 2592.714758] tw_sock_TCP 15KB 15KB [ 2592.715366] request_sock_TCP 15KB 15KB [ 2592.715953] TCP 60KB 60KB [ 2592.716571] hugetlbfs_inode_cache 30KB 30KB [ 2592.717211] bio-1 11KB 11KB [ 2592.717836] eventpoll_pwq 23KB 23KB [ 2592.718446] eventpoll_epi 43KB 43KB [ 2592.719052] inotify_inode_mark 35KB 35KB [ 2592.719681] request_queue 60KB 60KB [ 2592.720270] blkdev_ioc 33KB 33KB [ 2592.720875] bio-0 184KB 184KB [ 2592.721495] biovec-max 833KB 833KB [ 2592.722113] biovec-64 141KB 220KB [ 2592.722720] biovec-16 45KB 60KB [ 2592.723333] user_namespace 31KB 31KB [ 2592.723920] uid_cache 8KB 8KB [ 2592.724534] dmaengine-unmap-2 4KB 4KB [ 2592.725135] audit_buffer 7KB 7KB [ 2592.725777] skbuff_fclone_cache 105KB 105KB [ 2592.726409] skbuff_head_cache 541KB 596KB [ 2592.727007] file_lock_cache 51KB 51KB [ 2592.727616] file_lock_ctx 7KB 7KB [ 2592.728206] fsnotify_mark_connector 16KB 16KB [ 2592.728855] net_namespace 172KB 172KB [ 2592.729469] task_delay_info 73KB 92KB [ 2592.730059] taskstats 69KB 69KB [ 2592.730682] proc_dir_entry 455KB 502KB [ 2592.731273] pde_opener 35KB 35KB [ 2592.731877] seq_file 75KB 75KB [ 2592.732488] sigqueue 129KB 129KB [ 2592.733078] shmem_inode_cache 1282KB 1383KB [ 2592.733696] kernfs_iattrs_cache 247KB 247KB [ 2592.734337] kernfs_node_cache 5657KB 5850KB [ 2592.734929] mnt_cache 165KB 173KB [ 2592.735649] filp 1306KB 1410KB [ 2592.736241] names_cache 9715KB 9966KB [ 2592.736901] hashtab_node 278KB 278KB [ 2592.737513] ebitmap_node 1149KB 1149KB [ 2592.738109] avtab_node 4976KB 4976KB [ 2592.738718] avc_node 39KB 39KB [ 2592.739358] lsm_inode_cache 2532KB 3047KB [ 2592.739944] lsm_file_cache 184KB 184KB [ 2592.740548] key_jar 31KB 31KB [ 2592.741143] uts_namespace 15KB 15KB [ 2592.741749] nsproxy 11KB 11KB [ 2592.742381] vm_area_struct 939KB 1240KB [ 2592.742981] fs_cache 56KB 56KB [ 2592.743607] files_cache 275KB 302KB [ 2592.744196] signal_cache 320KB 401KB [ 2592.744802] sighand_cache 328KB 390KB [ 2592.745406] task_struct 820KB 1155KB [ 2592.746003] cred_jar 128KB 152KB [ 2592.746613] anon_vma_chain 178KB 267KB [ 2592.747205] anon_vma 114KB 167KB [ 2592.747814] pid 90KB 101KB [ 2592.748430] Acpi-Operand 215KB 249KB [ 2592.749034] Acpi-ParseExt 27KB 27KB [ 2592.749647] Acpi-Parse 154KB 169KB [ 2592.750247] Acpi-State 86KB 102KB [ 2592.750859] Acpi-Namespace 24KB 24KB [ 2592.751466] numa_policy 7KB 7KB [ 2592.752052] trace_event_file 163KB 163KB [ 2592.752666] ftrace_event_field 280KB 280KB [ 2592.753266] pool_workqueue 48KB 48KB [ 2592.753881] task_group 16KB 16KB [ 2592.754488] mm_struct 232KB 346KB [ 2592.755084] vmap_area 119KB 161KB [ 2592.755690] page->ptl 145KB 192KB [ 2592.756273] kmemleak_scan_area 116KB 147KB [ 2592.756890] kmemleak_object 1202413KB 1202413KB [ 2592.757522] kmalloc-8k 3648KB 4000KB [ 2592.758144] kmalloc-4k 7424KB 9248KB [ 2592.758769] kmalloc-2k 4768KB 5824KB [ 2592.759397] kmalloc-1k 2700KB 3616KB [ 2592.759977] kmalloc-512 42124KB 42124KB [ 2592.760595] kmalloc-256 1382KB 1592KB [ 2592.761200] kmalloc-192 667KB 700KB [ 2592.761834] kmalloc-128 478KB 628KB [ 2592.762467] kmalloc-96 381KB 788KB [ 2592.763085] kmalloc-64 908KB 1592KB [ 2592.763701] kmalloc-32 157420KB 157420KB [ 2592.764314] kmalloc-16 359KB 368KB [ 2592.764894] kmalloc-8 334KB 334KB [ 2592.765500] kmem_cache_node 47KB 47KB [ 2592.766097] kmem_cache 75KB 75KB [ 2592.766709] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-timesyncd.service,task=systemd-timesyn,pid=128,uid=101 [ 2592.768715] Out of memory (oom_kill_allocating_task): Killed process 128 (systemd-timesyn) total-vm:88376kB, anon-rss:744kB, file-rss:0kB, shmem-rss:0kB, UID:101 pgtables:76kB oom_score_adj:0 [ 2592.814870] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2592.817192] CPU: 0 PID: 103 Comm: systemd-journal Not tainted 5.10.197 #1 [ 2592.818725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.820438] Call Trace: [ 2592.820993] dump_stack+0x107/0x167 [ 2592.821760] dump_header+0x106/0x65e [ 2592.822539] oom_kill_process.cold+0x10/0x15 [ 2592.823452] out_of_memory+0x1149/0x1440 [ 2592.824303] ? oom_killer_disable+0x280/0x280 [ 2592.825237] ? mutex_trylock+0x237/0x2b0 [ 2592.826091] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2592.827334] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2592.828568] ? lock_acquire+0x107/0x470 [ 2592.829399] ? warn_alloc+0x190/0x190 [ 2592.830230] __alloc_pages_nodemask+0x51d/0x600 [ 2592.831200] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2592.832453] ? find_get_entry+0x2c8/0x740 [ 2592.833328] alloc_pages_current+0x187/0x280 [ 2592.834256] __page_cache_alloc+0x2d2/0x360 [ 2592.835160] pagecache_get_page+0x2c7/0xc80 [ 2592.836066] filemap_fault+0x177d/0x2210 [ 2592.836924] ? read_cache_page_gfp+0x30/0x30 [ 2592.837861] ? replace_page_cache_page+0x1200/0x1200 [ 2592.838904] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2592.840005] ext4_filemap_fault+0x87/0xc0 [ 2592.840858] __do_fault+0x113/0x410 [ 2592.841618] handle_mm_fault+0x1e53/0x3500 [ 2592.842502] ? __pmd_alloc+0x5e0/0x5e0 [ 2592.843317] ? vmacache_find+0x55/0x2a0 [ 2592.844150] do_user_addr_fault+0x56e/0xc60 [ 2592.845042] exc_page_fault+0xa2/0x1a0 [ 2592.845872] ? asm_exc_page_fault+0x8/0x30 [ 2592.846744] asm_exc_page_fault+0x1e/0x30 [ 2592.847598] RIP: 0033:0x7f481bbba116 [ 2592.848369] Code: Unable to access opcode bytes at RIP 0x7f481bbba0ec. [ 2592.849731] RSP: 002b:00007ffcecc68b50 EFLAGS: 00010293 [ 2592.850827] RAX: 0000000000000001 RBX: 000055b857715360 RCX: 00007f481bbba116 [ 2592.852301] RDX: 0000000000000014 RSI: 000055b85771b8e0 RDI: 0000000000000008 [ 2592.853782] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffceccbe080 [ 2592.855255] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 2592.856728] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 2592.858614] Mem-Info: [ 2592.859155] active_anon:33 inactive_anon:6730 isolated_anon:0 [ 2592.859155] active_file:0 inactive_file:0 isolated_file:0 [ 2592.859155] unevictable:0 dirty:0 writeback:0 [ 2592.859155] slab_reclaimable:6931 slab_unreclaimable:385281 [ 2592.859155] mapped:8732 shmem:70 pagetables:230 bounce:0 [ 2592.859155] free:2864 free_pcp:310 free_cma:0 [ 2592.865559] Node 0 active_anon:132kB inactive_anon:26920kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34928kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:3040kB all_unreclaimable? no [ 2592.870133] Node 0 DMA free:6492kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2592.875416] lowmem_reserve[]: 0 1616 1616 1616 [ 2592.876451] Node 0 DMA32 free:5972kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:132kB inactive_anon:26920kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:920kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 2592.882274] lowmem_reserve[]: 0 0 0 0 [ 2592.883115] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6492kB [ 2592.885973] Node 0 DMA32: 1340*4kB (UM) 47*8kB (UM) 12*16kB (UM) 1*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5960kB [ 2592.888782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2592.890531] 98 total pagecache pages [ 2592.891278] 0 pages in swap cache [ 2592.892010] Swap cache stats: add 0, delete 0, find 0/0 [ 2592.893112] Free swap = 0kB [ 2592.893770] Total swap = 0kB [ 2592.894410] 524158 pages RAM [ 2592.895027] 0 pages HighMem/MovableOnly [ 2592.895852] 105056 pages reserved [ 2592.896583] Unreclaimable slab info: [ 2592.897362] Name Used Total [ 2592.898513] pid_3 7KB 7KB [ 2592.899623] pid_2 78KB 78KB [ 2592.900734] IEEE-802.15.4-MAC 63KB 63KB [ 2592.901841] IEEE-802.15.4-RAW 63KB 63KB [ 2592.902951] p9_req_t 8KB 8KB [ 2592.904061] ip6-frags 15KB 15KB [ 2592.905174] fib6_nodes 28KB 28KB [ 2592.906302] ip6_dst_cache 41KB 41KB [ 2592.907442] PINGv6 63KB 63KB [ 2592.908557] RAWv6 315KB 315KB [ 2592.909673] UDPLITEv6 62KB 62KB [ 2592.910797] UDPv6 62KB 62KB [ 2592.911912] tw_sock_TCPv6 15KB 15KB [ 2592.913021] request_sock_TCPv6 15KB 15KB [ 2592.914175] TCPv6 62KB 62KB [ 2592.915291] scsi_sense_cache 8KB 8KB [ 2592.916402] sd_ext_cdb 3KB 3KB [ 2592.917505] virtio_scsi_cmd 16KB 16KB [ 2592.918602] sgpool-128 59KB 59KB [ 2592.919681] sgpool-64 63KB 63KB [ 2592.920760] sgpool-32 141KB 141KB [ 2592.921842] sgpool-16 135KB 135KB [ 2592.922925] sgpool-8 30KB 37KB [ 2592.924016] io_kiocb 525KB 525KB [ 2592.925116] mqueue_inode_cache 62KB 62KB [ 2592.926248] nfs_commit_data 15KB 15KB [ 2592.927344] nfs_write_data 47KB 47KB [ 2592.928452] jbd2_inode 11KB 11KB [ 2592.929547] ext4_system_zone 7KB 7KB [ 2592.930647] ext4_io_end_vec 7KB 7KB [ 2592.931743] ext4_bio_post_read_ctx 15KB 15KB [ 2592.932926] kioctx 31KB 31KB [ 2592.934027] aio_kiocb 7KB 7KB [ 2592.935124] dio 30KB 30KB [ 2592.936216] bio-2 4KB 4KB [ 2592.937325] fasync_cache 7KB 7KB [ 2592.938436] pid_namespace 7KB 7KB [ 2592.939526] posix_timers_cache 15KB 15KB [ 2592.940645] rpc_buffers 31KB 31KB [ 2592.941728] rpc_tasks 3KB 3KB [ 2592.942805] UNIX 326KB 352KB [ 2592.943967] UDP-Lite 63KB 63KB [ 2592.945051] tcp_bind_bucket 8KB 8KB [ 2592.946149] inet_peer_cache 8KB 8KB [ 2592.947232] xfrm_state 32KB 32KB [ 2592.948323] ip_fib_trie 8KB 8KB [ 2592.949400] ip_fib_alias 15KB 15KB [ 2592.950497] ip_dst_cache 56KB 56KB [ 2592.951569] PING 31KB 31KB [ 2592.952643] RAW 93KB 93KB [ 2592.953729] UDP 171KB 346KB [ 2592.954803] tw_sock_TCP 15KB 15KB [ 2592.955878] request_sock_TCP 15KB 15KB [ 2592.956969] TCP 60KB 60KB [ 2592.958061] hugetlbfs_inode_cache 30KB 30KB [ 2592.959396] bio-1 11KB 11KB [ 2592.960468] eventpoll_pwq 23KB 23KB [ 2592.961681] eventpoll_epi 43KB 43KB [ 2592.962904] inotify_inode_mark 35KB 35KB [ 2592.964116] request_queue 60KB 60KB [ 2592.965355] blkdev_ioc 33KB 33KB [ 2592.966453] bio-0 184KB 184KB [ 2592.967680] biovec-max 833KB 833KB [ 2592.968764] biovec-64 141KB 220KB [ 2592.969845] biovec-16 45KB 60KB [ 2592.971062] user_namespace 31KB 31KB [ 2592.972130] uid_cache 8KB 8KB [ 2592.973383] dmaengine-unmap-2 4KB 4KB [ 2592.974607] audit_buffer 7KB 7KB [ 2592.975674] skbuff_fclone_cache 105KB 105KB [ 2592.976779] skbuff_head_cache 545KB 596KB [ 2592.977863] file_lock_cache 51KB 51KB [ 2592.978947] file_lock_ctx 7KB 7KB [ 2592.980033] fsnotify_mark_connector 16KB 16KB [ 2592.981213] net_namespace 172KB 172KB [ 2592.982298] task_delay_info 73KB 92KB [ 2592.983379] taskstats 69KB 69KB [ 2592.984439] proc_dir_entry 455KB 502KB [ 2592.985496] pde_opener 35KB 35KB [ 2592.986566] seq_file 75KB 75KB [ 2592.987763] sigqueue 129KB 129KB [ 2592.988823] shmem_inode_cache 1282KB 1383KB [ 2592.989888] kernfs_iattrs_cache 247KB 247KB [ 2592.991000] kernfs_node_cache 5657KB 5850KB [ 2592.992063] mnt_cache 165KB 173KB [ 2592.993132] filp 1306KB 1410KB [ 2592.994195] names_cache 9715KB 9966KB [ 2592.995255] hashtab_node 278KB 278KB [ 2592.996324] ebitmap_node 1149KB 1149KB [ 2592.997380] avtab_node 4976KB 4976KB [ 2592.998467] avc_node 39KB 39KB [ 2592.999564] lsm_inode_cache 2532KB 3047KB [ 2593.000614] lsm_file_cache 184KB 184KB [ 2593.001668] key_jar 31KB 31KB [ 2593.002723] uts_namespace 15KB 15KB [ 2593.003774] nsproxy 11KB 11KB [ 2593.004864] vm_area_struct 939KB 1240KB [ 2593.005928] fs_cache 56KB 56KB [ 2593.006972] files_cache 275KB 302KB [ 2593.008019] signal_cache 320KB 401KB [ 2593.009067] sighand_cache 328KB 390KB [ 2593.010124] task_struct 820KB 1155KB [ 2593.011174] cred_jar 128KB 152KB [ 2593.012227] anon_vma_chain 178KB 267KB [ 2593.013278] anon_vma 112KB 167KB [ 2593.014330] pid 90KB 101KB [ 2593.015387] Acpi-Operand 215KB 249KB [ 2593.016434] Acpi-ParseExt 27KB 27KB [ 2593.017476] Acpi-Parse 154KB 169KB [ 2593.018538] Acpi-State 86KB 102KB [ 2593.019582] Acpi-Namespace 24KB 24KB [ 2593.020635] numa_policy 7KB 7KB [ 2593.021678] trace_event_file 163KB 163KB [ 2593.022722] ftrace_event_field 280KB 280KB [ 2593.023791] pool_workqueue 48KB 48KB [ 2593.024827] task_group 16KB 16KB [ 2593.025891] mm_struct 232KB 346KB [ 2593.026930] vmap_area 119KB 161KB [ 2593.027968] page->ptl 145KB 192KB [ 2593.029012] kmemleak_scan_area 116KB 147KB [ 2593.030078] kmemleak_object 1202800KB 1202800KB [ 2593.031135] kmalloc-8k 3648KB 4000KB [ 2593.032200] kmalloc-4k 7424KB 9248KB [ 2593.033255] kmalloc-2k 4768KB 5824KB [ 2593.034336] kmalloc-1k 2700KB 3616KB [ 2593.035369] kmalloc-512 42156KB 42156KB [ 2593.036428] kmalloc-256 1382KB 1592KB [ 2593.037473] kmalloc-192 667KB 700KB [ 2593.038555] kmalloc-128 478KB 628KB [ 2593.039632] kmalloc-96 381KB 788KB [ 2593.040726] kmalloc-64 908KB 1592KB [ 2593.041784] kmalloc-32 157472KB 157472KB [ 2593.042815] kmalloc-16 359KB 368KB [ 2593.043839] kmalloc-8 334KB 334KB [ 2593.044869] kmem_cache_node 47KB 47KB [ 2593.045908] kmem_cache 75KB 75KB [ 2593.046937] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 2593.050160] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:31944kB, anon-rss:892kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:84kB oom_score_adj:-250 [ 2593.279969] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2593.282355] CPU: 0 PID: 13016 Comm: in:imklog Not tainted 5.10.197 #1 [ 2593.283868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.285813] Call Trace: [ 2593.286431] dump_stack+0x107/0x167 [ 2593.287285] dump_header+0x106/0x65e [ 2593.288156] oom_kill_process.cold+0x10/0x15 [ 2593.289197] out_of_memory+0x1149/0x1440 [ 2593.290180] ? oom_killer_disable+0x280/0x280 [ 2593.291106] ? mutex_trylock+0x237/0x2b0 [ 2593.291939] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2593.293167] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2593.294410] ? lock_acquire+0x107/0x470 [ 2593.295248] ? warn_alloc+0x190/0x190 [ 2593.296073] __alloc_pages_nodemask+0x51d/0x600 [ 2593.297055] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2593.298311] ? find_get_entry+0x2c8/0x740 [ 2593.299193] alloc_pages_current+0x187/0x280 [ 2593.300115] __page_cache_alloc+0x2d2/0x360 [ 2593.301021] pagecache_get_page+0x2c7/0xc80 [ 2593.301943] filemap_fault+0x177d/0x2210 [ 2593.302793] ? read_cache_page_gfp+0x30/0x30 [ 2593.303693] ? replace_page_cache_page+0x1200/0x1200 [ 2593.304733] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2593.305825] ext4_filemap_fault+0x87/0xc0 [ 2593.306674] __do_fault+0x113/0x410 [ 2593.307440] handle_mm_fault+0x1e53/0x3500 [ 2593.308336] ? fsnotify+0xf50/0xf50 [ 2593.309099] ? find_held_lock+0x2c/0x110 [ 2593.309967] ? __pmd_alloc+0x5e0/0x5e0 [ 2593.310790] ? vmacache_find+0x55/0x2a0 [ 2593.311641] do_user_addr_fault+0x56e/0xc60 [ 2593.312540] exc_page_fault+0xa2/0x1a0 [ 2593.313358] ? asm_exc_page_fault+0x8/0x30 [ 2593.314240] asm_exc_page_fault+0x1e/0x30 [ 2593.315111] RIP: 0033:0x5565c9e1c760 [ 2593.315888] Code: Unable to access opcode bytes at RIP 0x5565c9e1c736. [ 2593.317265] RSP: 002b:00007f34dee853d8 EFLAGS: 00010202 [ 2593.318393] RAX: 0000000000000000 RBX: 00007f34d4036620 RCX: 0000000000000000 [ 2593.319900] RDX: 00000000000990f6 RSI: 00005565cac0ea20 RDI: 00005565cac0ea20 [ 2593.321399] RBP: 00005565cac0ea20 R08: 000000000000001c R09: 0000000000000640 [ 2593.322900] R10: a3d70a3d70a3d70b R11: 2ce33e6c02ce33e7 R12: 00005565cac0b5c0 [ 2593.324391] R13: 00007f34dee85d03 R14: 0000000000000004 R15: 00007f34dee85d78 [ 2593.325936] Mem-Info: [ 2593.326495] active_anon:31 inactive_anon:6490 isolated_anon:0 [ 2593.326495] active_file:5 inactive_file:17 isolated_file:0 [ 2593.326495] unevictable:0 dirty:0 writeback:0 [ 2593.326495] slab_reclaimable:6923 slab_unreclaimable:385665 [ 2593.326495] mapped:8705 shmem:70 pagetables:195 bounce:0 [ 2593.326495] free:3012 free_pcp:59 free_cma:0 [ 2593.332821] Node 0 active_anon:124kB inactive_anon:25960kB active_file:20kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34820kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2976kB all_unreclaimable? yes [ 2593.337461] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.342822] lowmem_reserve[]: 0 1616 1616 1616 [ 2593.343827] Node 0 DMA32 free:5564kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:124kB inactive_anon:25960kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:780kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 2593.349847] lowmem_reserve[]: 0 0 0 0 [ 2593.350753] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2593.353521] Node 0 DMA32: 1394*4kB (UME) 5*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5616kB [ 2593.356141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.357916] 102 total pagecache pages [ 2593.358711] 0 pages in swap cache [ 2593.359440] Swap cache stats: add 0, delete 0, find 0/0 [ 2593.360547] Free swap = 0kB [ 2593.361164] Total swap = 0kB [ 2593.361824] 524158 pages RAM [ 2593.362465] 0 pages HighMem/MovableOnly [ 2593.363271] 105056 pages reserved [ 2593.363998] Unreclaimable slab info: [ 2593.364779] Name Used Total [ 2593.365927] pid_3 7KB 7KB [ 2593.367033] pid_2 78KB 78KB [ 2593.368137] IEEE-802.15.4-MAC 63KB 63KB [ 2593.369250] IEEE-802.15.4-RAW 63KB 63KB [ 2593.370383] p9_req_t 8KB 8KB [ 2593.371492] ip6-frags 15KB 15KB [ 2593.372591] fib6_nodes 28KB 28KB [ 2593.373694] ip6_dst_cache 41KB 41KB [ 2593.374799] PINGv6 63KB 63KB [ 2593.375896] RAWv6 315KB 315KB [ 2593.376987] UDPLITEv6 62KB 62KB [ 2593.378098] UDPv6 62KB 62KB [ 2593.379202] tw_sock_TCPv6 15KB 15KB [ 2593.380324] request_sock_TCPv6 15KB 15KB [ 2593.381422] TCPv6 62KB 62KB [ 2593.382520] scsi_sense_cache 8KB 8KB [ 2593.383606] sd_ext_cdb 3KB 3KB [ 2593.384682] virtio_scsi_cmd 16KB 16KB [ 2593.385792] sgpool-128 59KB 59KB [ 2593.386867] sgpool-64 63KB 63KB [ 2593.387947] sgpool-32 157KB 157KB [ 2593.389024] sgpool-16 135KB 135KB [ 2593.390111] sgpool-8 30KB 37KB [ 2593.391197] io_kiocb 525KB 525KB [ 2593.392285] mqueue_inode_cache 62KB 62KB [ 2593.393391] nfs_commit_data 15KB 15KB [ 2593.394477] nfs_write_data 47KB 47KB [ 2593.395560] jbd2_inode 11KB 11KB [ 2593.396637] ext4_system_zone 7KB 7KB [ 2593.397713] ext4_io_end_vec 7KB 7KB [ 2593.398809] ext4_bio_post_read_ctx 15KB 15KB [ 2593.399987] kioctx 31KB 31KB [ 2593.401066] aio_kiocb 7KB 7KB [ 2593.402156] dio 30KB 30KB [ 2593.403239] bio-2 4KB 4KB [ 2593.404329] fasync_cache 7KB 7KB [ 2593.405406] pid_namespace 7KB 7KB [ 2593.406478] posix_timers_cache 15KB 15KB [ 2593.407559] rpc_buffers 31KB 31KB [ 2593.408623] rpc_tasks 3KB 3KB [ 2593.409685] UNIX 326KB 352KB [ 2593.410760] UDP-Lite 63KB 63KB [ 2593.411838] tcp_bind_bucket 8KB 8KB [ 2593.412914] inet_peer_cache 8KB 8KB [ 2593.414001] xfrm_state 32KB 32KB [ 2593.415068] ip_fib_trie 8KB 8KB [ 2593.416161] ip_fib_alias 15KB 15KB [ 2593.417255] ip_dst_cache 56KB 56KB [ 2593.418360] PING 31KB 31KB [ 2593.419449] RAW 93KB 93KB [ 2593.420544] UDP 171KB 346KB [ 2593.421637] tw_sock_TCP 15KB 15KB [ 2593.422740] request_sock_TCP 15KB 15KB [ 2593.423835] TCP 60KB 60KB [ 2593.424923] hugetlbfs_inode_cache 30KB 30KB [ 2593.426117] bio-1 11KB 11KB [ 2593.427209] eventpoll_pwq 23KB 23KB [ 2593.428323] eventpoll_epi 43KB 43KB [ 2593.429411] inotify_inode_mark 35KB 35KB [ 2593.430528] request_queue 60KB 60KB [ 2593.431617] blkdev_ioc 33KB 33KB [ 2593.432704] bio-0 184KB 184KB [ 2593.433800] biovec-max 833KB 833KB [ 2593.434892] biovec-64 189KB 220KB [ 2593.435982] biovec-16 45KB 60KB [ 2593.437078] user_namespace 31KB 31KB [ 2593.438193] uid_cache 8KB 8KB [ 2593.439283] dmaengine-unmap-2 4KB 4KB [ 2593.440379] audit_buffer 7KB 7KB [ 2593.441476] skbuff_fclone_cache 105KB 105KB [ 2593.442641] skbuff_head_cache 515KB 581KB [ 2593.443741] file_lock_cache 51KB 51KB [ 2593.444835] file_lock_ctx 7KB 7KB [ 2593.445945] fsnotify_mark_connector 16KB 16KB [ 2593.447142] net_namespace 172KB 172KB [ 2593.448234] task_delay_info 73KB 92KB [ 2593.449326] taskstats 69KB 69KB [ 2593.450430] proc_dir_entry 455KB 502KB [ 2593.451525] pde_opener 35KB 35KB [ 2593.452620] seq_file 75KB 75KB [ 2593.453730] sigqueue 129KB 129KB [ 2593.454808] shmem_inode_cache 1274KB 1383KB [ 2593.455885] kernfs_iattrs_cache 247KB 247KB [ 2593.457004] kernfs_node_cache 5657KB 5850KB [ 2593.458212] mnt_cache 165KB 173KB [ 2593.459403] filp 1300KB 1410KB [ 2593.460498] names_cache 9464KB 9728KB [ 2593.461590] hashtab_node 278KB 278KB [ 2593.462695] ebitmap_node 1149KB 1149KB [ 2593.463789] avtab_node 4976KB 4976KB [ 2593.464887] avc_node 39KB 39KB [ 2593.466022] lsm_inode_cache 2527KB 3047KB [ 2593.467114] lsm_file_cache 184KB 184KB [ 2593.468203] key_jar 31KB 31KB [ 2593.469299] uts_namespace 15KB 15KB [ 2593.470420] nsproxy 11KB 11KB [ 2593.471523] vm_area_struct 939KB 1240KB [ 2593.472614] fs_cache 56KB 56KB [ 2593.473716] files_cache 275KB 302KB [ 2593.474811] signal_cache 320KB 401KB [ 2593.475901] sighand_cache 328KB 390KB [ 2593.477010] task_struct 820KB 1155KB [ 2593.478139] cred_jar 128KB 152KB [ 2593.479245] anon_vma_chain 178KB 267KB [ 2593.480347] anon_vma 111KB 167KB [ 2593.481455] pid 90KB 101KB [ 2593.482579] Acpi-Operand 215KB 249KB [ 2593.483676] Acpi-ParseExt 27KB 27KB [ 2593.484787] Acpi-Parse 154KB 169KB [ 2593.485905] Acpi-State 86KB 102KB [ 2593.487014] Acpi-Namespace 24KB 24KB [ 2593.488131] numa_policy 7KB 7KB [ 2593.489240] trace_event_file 163KB 163KB [ 2593.490387] ftrace_event_field 280KB 280KB [ 2593.491535] pool_workqueue 48KB 48KB [ 2593.492663] task_group 16KB 16KB [ 2593.493790] mm_struct 232KB 346KB [ 2593.494918] vmap_area 119KB 161KB [ 2593.496037] page->ptl 145KB 192KB [ 2593.497159] kmemleak_scan_area 116KB 147KB [ 2593.498324] kmemleak_object 1203992KB 1203992KB [ 2593.499464] kmalloc-8k 3648KB 4000KB [ 2593.500593] kmalloc-4k 7312KB 9216KB [ 2593.501726] kmalloc-2k 4732KB 5792KB [ 2593.502840] kmalloc-1k 2624KB 3616KB [ 2593.503962] kmalloc-512 42153KB 42156KB [ 2593.505083] kmalloc-256 1381KB 1592KB [ 2593.506227] kmalloc-192 666KB 700KB [ 2593.507360] kmalloc-128 477KB 628KB [ 2593.508494] kmalloc-96 379KB 780KB [ 2593.509642] kmalloc-64 907KB 1592KB [ 2593.510782] kmalloc-32 157676KB 157676KB [ 2593.511904] kmalloc-16 359KB 368KB [ 2593.513023] kmalloc-8 334KB 334KB [ 2593.514170] kmem_cache_node 47KB 47KB [ 2593.515322] kmem_cache 75KB 75KB [ 2593.516436] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=13016,uid=0 [ 2593.519665] Out of memory (oom_kill_allocating_task): Killed process 13014 (rsyslogd) total-vm:220876kB, anon-rss:708kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 2593.630752] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2593.633145] CPU: 0 PID: 12940 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2593.634645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.636328] Call Trace: [ 2593.636881] dump_stack+0x107/0x167 [ 2593.637616] dump_header+0x106/0x65e [ 2593.638383] oom_kill_process.cold+0x10/0x15 [ 2593.639279] out_of_memory+0x1149/0x1440 [ 2593.640107] ? oom_killer_disable+0x280/0x280 [ 2593.641031] ? mutex_trylock+0x237/0x2b0 [ 2593.641855] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2593.643070] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2593.644287] ? lock_acquire+0x107/0x470 [ 2593.645124] ? warn_alloc+0x190/0x190 [ 2593.645954] __alloc_pages_nodemask+0x51d/0x600 [ 2593.646932] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2593.648203] alloc_pages_current+0x187/0x280 [ 2593.649120] allocate_slab+0x29b/0x380 [ 2593.649942] ___slab_alloc+0x470/0x700 [ 2593.650752] ? io_issue_sqe+0x2492/0x7700 [ 2593.651623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.652714] ? trace_hardirqs_on+0x5b/0x180 [ 2593.653620] ? io_issue_sqe+0x2492/0x7700 [ 2593.654503] ? kmem_cache_alloc_trace+0x305/0x320 [ 2593.655511] kmem_cache_alloc_trace+0x305/0x320 [ 2593.656489] io_issue_sqe+0x2492/0x7700 [ 2593.657335] ? io_connect+0x610/0x610 [ 2593.658130] ? mark_lock+0xf5/0x2df0 [ 2593.658923] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2593.660023] ? lock_chain_count+0x20/0x20 [ 2593.660887] ? io_dismantle_req+0xdf/0x180 [ 2593.661798] __io_queue_sqe+0x90/0x9d0 [ 2593.662615] ? io_issue_sqe+0x7700/0x7700 [ 2593.663484] ? mark_held_locks+0x9e/0xe0 [ 2593.664338] ? rwlock_bug.part.0+0x90/0x90 [ 2593.665229] io_req_task_submit+0xbf/0x1b0 [ 2593.666124] tctx_task_work+0x21a/0x8a0 [ 2593.666964] ? io_fallback_req_func+0x430/0x430 [ 2593.667935] ? rwlock_bug.part.0+0x90/0x90 [ 2593.668840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.669938] task_work_run+0xe2/0x1a0 [ 2593.670727] exit_to_user_mode_prepare+0x17c/0x190 [ 2593.671735] syscall_exit_to_user_mode+0x38/0x1e0 [ 2593.672738] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2593.673796] RIP: 0033:0x7faf32072b19 [ 2593.674559] Code: Unable to access opcode bytes at RIP 0x7faf32072aef. [ 2593.675899] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2593.677461] RAX: 000000000000030e RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2593.678946] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 2593.680440] RBP: 00007faf320ccf6d R08: 0000000000000000 R09: 0000000000000000 [ 2593.681947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.683437] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 [ 2593.685264] Mem-Info: [ 2593.685873] active_anon:31 inactive_anon:6238 isolated_anon:0 [ 2593.685873] active_file:5 inactive_file:26 isolated_file:0 [ 2593.685873] unevictable:0 dirty:0 writeback:0 [ 2593.685873] slab_reclaimable:6923 slab_unreclaimable:385777 [ 2593.685873] mapped:8726 shmem:70 pagetables:195 bounce:0 [ 2593.685873] free:3169 free_pcp:0 free_cma:0 [ 2593.692099] Node 0 active_anon:124kB inactive_anon:24952kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2848kB all_unreclaimable? no [ 2593.696674] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.701918] lowmem_reserve[]: 0 1616 1616 1616 [ 2593.702897] Node 0 DMA32 free:6192kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:124kB inactive_anon:24952kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.708524] lowmem_reserve[]: 0 0 0 0 [ 2593.709354] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2593.712125] Node 0 DMA32: 1608*4kB (UM) 15*8kB (UM) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6552kB [ 2593.714697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2593.716413] 102 total pagecache pages [ 2593.717175] 0 pages in swap cache [ 2593.717903] Swap cache stats: add 0, delete 0, find 0/0 [ 2593.718991] Free swap = 0kB [ 2593.719621] Total swap = 0kB [ 2593.720228] 524158 pages RAM [ 2593.720858] 0 pages HighMem/MovableOnly [ 2593.721696] 105056 pages reserved [ 2593.722444] Unreclaimable slab info: [ 2593.723550] Name Used Total [ 2593.724727] pid_3 7KB 7KB [ 2593.725835] pid_2 78KB 78KB [ 2593.726930] IEEE-802.15.4-MAC 63KB 63KB [ 2593.728022] IEEE-802.15.4-RAW 63KB 63KB [ 2593.729120] p9_req_t 8KB 8KB [ 2593.730238] ip6-frags 15KB 15KB [ 2593.731331] fib6_nodes 28KB 28KB [ 2593.732428] ip6_dst_cache 41KB 41KB [ 2593.733521] PINGv6 63KB 63KB [ 2593.734627] RAWv6 315KB 315KB [ 2593.735719] UDPLITEv6 62KB 62KB [ 2593.736812] UDPv6 62KB 62KB [ 2593.737917] tw_sock_TCPv6 15KB 15KB [ 2593.739008] request_sock_TCPv6 15KB 15KB [ 2593.740123] TCPv6 62KB 62KB [ 2593.741225] scsi_sense_cache 8KB 8KB [ 2593.742340] sd_ext_cdb 3KB 3KB [ 2593.743434] virtio_scsi_cmd 16KB 16KB [ 2593.744535] sgpool-128 59KB 59KB [ 2593.745631] sgpool-64 63KB 63KB [ 2593.746754] sgpool-32 173KB 173KB [ 2593.747846] sgpool-16 135KB 135KB [ 2593.748940] sgpool-8 30KB 37KB [ 2593.750054] io_kiocb 525KB 525KB [ 2593.751147] mqueue_inode_cache 62KB 62KB [ 2593.752255] nfs_commit_data 15KB 15KB [ 2593.753349] nfs_write_data 47KB 47KB [ 2593.754455] jbd2_inode 11KB 11KB [ 2593.755547] ext4_system_zone 7KB 7KB [ 2593.756641] ext4_io_end_vec 7KB 7KB [ 2593.757755] ext4_bio_post_read_ctx 15KB 15KB [ 2593.758933] kioctx 31KB 31KB [ 2593.760028] aio_kiocb 7KB 7KB [ 2593.761125] dio 30KB 30KB [ 2593.762229] bio-2 4KB 4KB [ 2593.763322] fasync_cache 7KB 7KB [ 2593.764416] pid_namespace 7KB 7KB [ 2593.765512] posix_timers_cache 15KB 15KB [ 2593.766640] rpc_buffers 31KB 31KB [ 2593.767735] rpc_tasks 3KB 3KB [ 2593.768827] UNIX 326KB 352KB [ 2593.769942] UDP-Lite 63KB 63KB [ 2593.771037] tcp_bind_bucket 8KB 8KB [ 2593.772130] inet_peer_cache 8KB 8KB [ 2593.773223] xfrm_state 32KB 32KB [ 2593.774327] ip_fib_trie 8KB 8KB [ 2593.775601] ip_fib_alias 15KB 15KB [ 2593.776697] ip_dst_cache 56KB 56KB [ 2593.777815] PING 31KB 31KB [ 2593.778910] RAW 93KB 93KB [ 2593.780006] UDP 171KB 346KB [ 2593.781100] tw_sock_TCP 15KB 15KB [ 2593.782200] request_sock_TCP 15KB 15KB [ 2593.783300] TCP 60KB 60KB [ 2593.784414] hugetlbfs_inode_cache 30KB 30KB [ 2593.785575] bio-1 11KB 11KB [ 2593.786690] eventpoll_pwq 23KB 23KB [ 2593.787930] eventpoll_epi 43KB 43KB [ 2593.789032] inotify_inode_mark 35KB 35KB [ 2593.790164] request_queue 60KB 60KB [ 2593.791265] blkdev_ioc 33KB 33KB [ 2593.792358] bio-0 184KB 184KB [ 2593.793454] biovec-max 833KB 833KB [ 2593.794556] biovec-64 189KB 220KB [ 2593.795670] biovec-16 45KB 60KB [ 2593.796776] user_namespace 31KB 31KB [ 2593.797910] uid_cache 8KB 8KB [ 2593.799041] dmaengine-unmap-2 4KB 4KB [ 2593.800148] audit_buffer 7KB 7KB [ 2593.801254] skbuff_fclone_cache 105KB 105KB [ 2593.802407] skbuff_head_cache 520KB 577KB [ 2593.803523] file_lock_cache 51KB 51KB [ 2593.804650] file_lock_ctx 7KB 7KB [ 2593.805790] fsnotify_mark_connector 16KB 16KB [ 2593.807025] net_namespace 172KB 172KB [ 2593.808339] task_delay_info 73KB 92KB [ 2593.809465] taskstats 69KB 69KB [ 2593.810604] proc_dir_entry 455KB 502KB [ 2593.811722] pde_opener 35KB 35KB [ 2593.812858] seq_file 75KB 75KB [ 2593.813983] sigqueue 129KB 129KB [ 2593.815105] shmem_inode_cache 1271KB 1383KB [ 2593.816223] kernfs_iattrs_cache 247KB 247KB [ 2593.817373] kernfs_node_cache 5564KB 5781KB [ 2593.818501] mnt_cache 165KB 173KB [ 2593.819617] filp 1252KB 1395KB [ 2593.820725] names_cache 9286KB 9549KB [ 2593.821849] hashtab_node 278KB 278KB [ 2593.822973] ebitmap_node 1149KB 1149KB [ 2593.824107] avtab_node 4976KB 4976KB [ 2593.825237] avc_node 39KB 39KB [ 2593.826538] lsm_inode_cache 2526KB 3043KB [ 2593.827655] lsm_file_cache 184KB 184KB [ 2593.828789] key_jar 31KB 31KB [ 2593.830056] uts_namespace 15KB 15KB [ 2593.831185] nsproxy 11KB 11KB [ 2593.832339] vm_area_struct 939KB 1240KB [ 2593.833471] fs_cache 56KB 56KB [ 2593.834597] files_cache 275KB 302KB [ 2593.835730] signal_cache 320KB 401KB [ 2593.836861] sighand_cache 328KB 390KB [ 2593.837989] task_struct 820KB 1155KB [ 2593.839110] cred_jar 128KB 152KB [ 2593.840243] anon_vma_chain 178KB 267KB [ 2593.841550] anon_vma 109KB 163KB [ 2593.842694] pid 90KB 101KB [ 2593.843867] Acpi-Operand 215KB 249KB [ 2593.845075] Acpi-ParseExt 27KB 27KB [ 2593.846390] Acpi-Parse 154KB 169KB [ 2593.847524] Acpi-State 86KB 102KB [ 2593.848641] Acpi-Namespace 24KB 24KB [ 2593.849798] numa_policy 7KB 7KB [ 2593.851046] trace_event_file 163KB 163KB [ 2593.852191] ftrace_event_field 280KB 280KB [ 2593.853338] pool_workqueue 48KB 48KB [ 2593.854481] task_group 16KB 16KB [ 2593.855595] mm_struct 232KB 346KB [ 2593.856709] vmap_area 119KB 161KB [ 2593.858002] page->ptl 145KB 192KB [ 2593.859244] kmemleak_scan_area 116KB 147KB [ 2593.860514] kmemleak_object 1205147KB 1205147KB [ 2593.861804] kmalloc-8k 3408KB 3808KB [ 2593.863096] kmalloc-4k 7200KB 9184KB [ 2593.864407] kmalloc-2k 4676KB 5792KB [ 2593.865657] kmalloc-1k 2594KB 3616KB [ 2593.866944] kmalloc-512 42160KB 42160KB [ 2593.868071] kmalloc-256 1344KB 1592KB [ 2593.869185] kmalloc-192 656KB 700KB [ 2593.870331] kmalloc-128 477KB 628KB [ 2593.871444] kmalloc-96 376KB 780KB [ 2593.872573] kmalloc-64 907KB 1592KB [ 2593.873721] kmalloc-32 157876KB 157876KB [ 2593.874864] kmalloc-16 359KB 368KB [ 2593.876158] kmalloc-8 334KB 334KB [ 2593.877431] kmem_cache_node 47KB 47KB [ 2593.878731] kmem_cache 75KB 75KB [ 2593.879847] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=12940,uid=0 [ 2593.883803] Out of memory (oom_kill_allocating_task): Killed process 12940 (syz-executor.7) total-vm:94812kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 2593.887825] syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 2593.890507] CPU: 0 PID: 12940 Comm: syz-executor.7 Not tainted 5.10.197 #1 [ 2593.891906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.893586] Call Trace: [ 2593.894143] dump_stack+0x107/0x167 [ 2593.894184] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2593.894881] warn_alloc.cold+0x95/0x18a [ 2593.894905] ? zone_watermark_ok_safe+0x260/0x260 [ 2593.897726] ? oom_kill_process+0xd5/0x4c0 [ 2593.898613] ? wait_for_completion_io+0x270/0x270 [ 2593.899614] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 2593.900841] ? lock_acquire+0x107/0x470 [ 2593.901667] ? warn_alloc+0x190/0x190 [ 2593.902505] __alloc_pages_nodemask+0x51d/0x600 [ 2593.903469] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2593.904739] alloc_pages_current+0x187/0x280 [ 2593.905655] allocate_slab+0x29b/0x380 [ 2593.906478] ___slab_alloc+0x470/0x700 [ 2593.907295] ? io_issue_sqe+0x2492/0x7700 [ 2593.908160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.909244] ? trace_hardirqs_on+0x5b/0x180 [ 2593.910138] ? io_issue_sqe+0x2492/0x7700 [ 2593.910991] ? kmem_cache_alloc_trace+0x305/0x320 [ 2593.911989] kmem_cache_alloc_trace+0x305/0x320 [ 2593.912956] io_issue_sqe+0x2492/0x7700 [ 2593.913811] ? io_connect+0x610/0x610 [ 2593.914606] ? mark_lock+0xf5/0x2df0 [ 2593.915388] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2593.916488] ? lock_chain_count+0x20/0x20 [ 2593.917346] ? io_dismantle_req+0xdf/0x180 [ 2593.918249] __io_queue_sqe+0x90/0x9d0 [ 2593.919064] ? io_issue_sqe+0x7700/0x7700 [ 2593.919935] ? mark_held_locks+0x9e/0xe0 [ 2593.920771] ? rwlock_bug.part.0+0x90/0x90 [ 2593.921653] io_req_task_submit+0xbf/0x1b0 [ 2593.922553] tctx_task_work+0x21a/0x8a0 [ 2593.923396] ? io_fallback_req_func+0x430/0x430 [ 2593.924356] ? rwlock_bug.part.0+0x90/0x90 [ 2593.925243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2593.926345] task_work_run+0xe2/0x1a0 [ 2593.927150] exit_to_user_mode_prepare+0x17c/0x190 [ 2593.928181] syscall_exit_to_user_mode+0x38/0x1e0 [ 2593.929194] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2593.930261] RIP: 0033:0x7faf32072b19 [ 2593.931026] Code: Unable to access opcode bytes at RIP 0x7faf32072aef. [ 2593.932374] RSP: 002b:00007faf2f5e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2593.933980] RAX: 000000000000030e RBX: 00007faf32185f60 RCX: 00007faf32072b19 [ 2593.935462] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000005 [ 2593.936934] RBP: 00007faf320ccf6d R08: 0000000000000000 R09: 0000000000000000 [ 2593.938411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.939879] R13: 00007ffe933d16af R14: 00007faf2f5e8300 R15: 0000000000022000 [ 2593.941369] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.197 #1 [ 2593.941391] Mem-Info: [ 2593.942056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.942066] Call Trace: [ 2593.942613] active_anon:31 inactive_anon:6238 isolated_anon:0 [ 2593.942613] active_file:5 inactive_file:9 isolated_file:0 [ 2593.942613] unevictable:0 dirty:0 writeback:0 [ 2593.942613] slab_reclaimable:6923 slab_unreclaimable:385904 [ 2593.942613] mapped:8726 shmem:70 pagetables:195 bounce:0 [ 2593.942613] free:3043 free_pcp:0 free_cma:0 [ 2593.943489] dump_stack+0x107/0x167 [ 2593.943505] dump_header+0x106/0x65e [ 2593.944034] Node 0 active_anon:124kB inactive_anon:24952kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2848kB all_unreclaimable? no [ 2593.947310] oom_kill_process.cold+0x10/0x15 [ 2593.947324] out_of_memory+0x358/0x1440 [ 2593.947340] ? oom_killer_disable+0x280/0x280 [ 2593.948062] Node 0 [ 2593.948468] ? mutex_trylock+0x237/0x2b0 [ 2593.948479] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2593.948496] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2593.953088] DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.953521] ? lock_acquire+0x107/0x470 [ 2593.953536] ? warn_alloc+0x190/0x190 [ 2593.954347] lowmem_reserve[]: [ 2593.954825] __alloc_pages_nodemask+0x51d/0x600 [ 2593.955263] 0 [ 2593.955703] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2593.955716] ? find_get_entry+0x2c8/0x740 [ 2593.955734] alloc_pages_current+0x187/0x280 [ 2593.956922] 1616 [ 2593.957540] __page_cache_alloc+0x2d2/0x360 [ 2593.957553] pagecache_get_page+0x2c7/0xc80 [ 2593.957569] filemap_fault+0x177d/0x2210 [ 2593.962647] 1616 [ 2593.963067] ? read_cache_page_gfp+0x30/0x30 [ 2593.963842] 1616 [ 2593.964177] ? replace_page_cache_page+0x1200/0x1200 [ 2593.965111] [ 2593.965297] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2593.965315] ext4_filemap_fault+0x87/0xc0 [ 2593.966541] Node 0 [ 2593.966977] __do_fault+0x113/0x410 [ 2593.967900] DMA32 free:5688kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:124kB inactive_anon:24952kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.968084] handle_mm_fault+0x1e53/0x3500 [ 2593.968951] lowmem_reserve[]: [ 2593.969418] ? find_held_lock+0x2c/0x110 [ 2593.969430] ? __pmd_alloc+0x5e0/0x5e0 [ 2593.969446] ? vmacache_find+0x55/0x2a0 [ 2593.970262] 0 [ 2593.970497] do_user_addr_fault+0x56e/0xc60 [ 2593.970515] exc_page_fault+0xa2/0x1a0 [ 2593.971401] 0 [ 2593.971623] ? asm_exc_page_fault+0x8/0x30 [ 2593.972655] 0 [ 2593.972823] asm_exc_page_fault+0x1e/0x30 [ 2593.973898] 0 [ 2593.974331] RIP: 0033:0x7f4391b9daf7 [ 2593.974351] Code: Unable to access opcode bytes at RIP 0x7f4391b9dacd. [ 2593.974800] [ 2593.975190] RSP: 002b:00007ffc65ac7c28 EFLAGS: 00010202 [ 2593.980643] Node 0 [ 2593.981081] RAX: 000055ac22d02bae RBX: 00007f4391f3da31 RCX: 0000000000000011 [ 2593.981094] RDX: 00007f4391f3da31 RSI: 00007f4391f43a0d RDI: 00007f4391f3da20 [ 2593.981738] DMA: [ 2593.982162] RBP: 00007f4391f43a0d R08: 000055ac22d02ba0 R09: 0070756f7267632f [ 2593.982175] R10: a58334e78d1327cd R11: 0000000000000000 R12: 000055ac22d02bae [ 2593.982972] 1*4kB [ 2593.983374] R13: 000055ac22d02ba0 R14: 00007ffc65ac7ec0 R15: 00007ffc65ac7e50 [ 2593.983518] Mem-Info: [ 2593.983763] (U) [ 2593.984248] active_anon:31 inactive_anon:6238 isolated_anon:0 [ 2593.984248] active_file:5 inactive_file:9 isolated_file:0 [ 2593.984248] unevictable:0 dirty:0 writeback:0 [ 2593.984248] slab_reclaimable:6923 slab_unreclaimable:385926 [ 2593.984248] mapped:8726 shmem:70 pagetables:195 bounce:0 [ 2593.984248] free:3043 free_pcp:62 free_cma:0 [ 2593.985029] 0*8kB 1*16kB [ 2593.985250] Node 0 active_anon:124kB inactive_anon:24952kB active_file:20kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2848kB all_unreclaimable? no [ 2593.985259] Node 0 [ 2593.986143] (U) [ 2593.986368] DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2593.986378] lowmem_reserve[]: [ 2593.987207] 0*32kB [ 2593.987417] 0 1616 1616 [ 2593.988172] 1*64kB [ 2593.988906] 1616 [ 2593.988919] Node 0 [ 2593.989249] (U) [ 2593.989862] DMA32 free:5688kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:124kB inactive_anon:24952kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:780kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2593.989871] lowmem_reserve[]: [ 2593.990344] 0*128kB [ 2593.991120] 0 0 [ 2593.992588] 1*256kB [ 2593.992812] 0 0 [ 2593.994290] (U) [ 2593.995093] [ 2593.995549] 0*512kB [ 2593.996341] Node 0 DMA: [ 2593.996842] 0*1024kB [ 2593.997063] 1*4kB [ 2594.003237] 1*2048kB [ 2594.003541] (U) 0*8kB 1*16kB [ 2594.008126] (M) [ 2594.008377] (U) 0*32kB 1*64kB [ 2594.008795] 1*4096kB [ 2594.011596] (U) 0*128kB 1*256kB [ 2594.012238] (M) [ 2594.012499] (U) 0*512kB 0*1024kB [ 2594.013053] = 6484kB [ 2594.013313] 1*2048kB (M) [ 2594.013749] Node 0 [ 2594.013995] 1*4096kB (M) [ 2594.014426] DMA32: [ 2594.017470] = 6484kB [ 2594.017474] Node 0 DMA32: [ 2594.018121] 1440*4kB [ 2594.018391] 1440*4kB (UME) [ 2594.018799] (UME) [ 2594.019049] 2*8kB (UM) [ 2594.019479] 2*8kB [ 2594.019691] 0*16kB 0*32kB [ 2594.020033] (UM) [ 2594.020283] 0*64kB 0*128kB [ 2594.020854] 0*16kB [ 2594.021101] 0*256kB 0*512kB [ 2594.021566] 0*32kB [ 2594.021828] 0*1024kB 0*2048kB [ 2594.022480] 0*64kB [ 2594.022688] 0*4096kB = 5776kB [ 2594.023356] 0*128kB [ 2594.023627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2594.023638] 102 total pagecache pages [ 2594.024328] 0*256kB [ 2594.024542] 0 pages in swap cache [ 2594.025231] 0*512kB [ 2594.025500] Swap cache stats: add 0, delete 0, find 0/0 [ 2594.025511] Free swap = 0kB [ 2594.026078] 0*1024kB [ 2594.026333] Total swap = 0kB [ 2594.026337] 524158 pages RAM [ 2594.026348] 0 pages HighMem/MovableOnly [ 2594.026901] 0*2048kB [ 2594.027142] 105056 pages reserved [ 2594.027152] Unreclaimable slab info: [ 2594.027642] 0*4096kB [ 2594.027954] Name Used Total [ 2594.027965] pid_3 7KB 7KB [ 2594.028470] = 5776kB [ 2594.028792] pid_2 78KB 78KB [ 2594.029230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2594.029524] IEEE-802.15.4-MAC 63KB 63KB [ 2594.029536] IEEE-802.15.4-RAW 63KB 63KB [ 2594.029993] 102 total pagecache pages [ 2594.030315] p9_req_t 8KB 8KB [ 2594.030328] ip6-frags 15KB 15KB [ 2594.030747] 0 pages in swap cache [ 2594.031067] fib6_nodes 28KB 28KB [ 2594.031078] ip6_dst_cache 41KB 41KB [ 2594.031550] Swap cache stats: add 0, delete 0, find 0/0 [ 2594.031873] PINGv6 63KB 63KB [ 2594.031885] RAWv6 315KB 315KB [ 2594.032353] Free swap = 0kB [ 2594.032700] UDPLITEv6 62KB 62KB [ 2594.032712] UDPv6 62KB 62KB [ 2594.033161] Total swap = 0kB [ 2594.033502] tw_sock_TCPv6 15KB 15KB [ 2594.033513] request_sock_TCPv6 15KB 15KB [ 2594.033990] 524158 pages RAM [ 2594.034923] TCPv6 62KB 62KB [ 2594.034936] scsi_sense_cache 8KB 8KB [ 2594.035710] 0 pages HighMem/MovableOnly [ 2594.035970] sd_ext_cdb 3KB 3KB [ 2594.036673] 105056 pages reserved [ 2594.036927] virtio_scsi_cmd 16KB 16KB [ 2594.036940] sgpool-128 59KB 59KB [ 2594.038086] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2594.038368] sgpool-64 63KB 63KB [ 2594.038852] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2594.038867] node 0: slabs: 39471, objs: 2526144, free: 0 [ 2594.039197] sgpool-32 180KB 180KB [ 2594.060816] sgpool-16 135KB 135KB [ 2594.061416] sgpool-8 30KB 37KB [ 2594.062003] io_kiocb 525KB 525KB [ 2594.062593] mqueue_inode_cache 62KB 62KB [ 2594.063167] nfs_commit_data 15KB 15KB [ 2594.063756] nfs_write_data 47KB 47KB [ 2594.064349] jbd2_inode 11KB 11KB [ 2594.064923] ext4_system_zone 7KB 7KB [ 2594.065506] ext4_io_end_vec 7KB 7KB [ 2594.066099] ext4_bio_post_read_ctx 15KB 15KB [ 2594.066721] kioctx 31KB 31KB [ 2594.067321] aio_kiocb 7KB 7KB [ 2594.067892] dio 30KB 30KB [ 2594.068492] bio-2 4KB 4KB [ 2594.069082] fasync_cache 7KB 7KB [ 2594.069688] pid_namespace 7KB 7KB [ 2594.070284] posix_timers_cache 15KB 15KB [ 2594.070888] rpc_buffers 31KB 31KB [ 2594.071494] rpc_tasks 3KB 3KB [ 2594.072081] UNIX 326KB 352KB [ 2594.072692] UDP-Lite 63KB 63KB [ 2594.073285] tcp_bind_bucket 8KB 8KB [ 2594.073896] inet_peer_cache 8KB 8KB [ 2594.074508] xfrm_state 32KB 32KB [ 2594.075097] ip_fib_trie 8KB 8KB [ 2594.075703] ip_fib_alias 15KB 15KB [ 2594.076285] ip_dst_cache 56KB 56KB [ 2594.076889] PING 31KB 31KB [ 2594.077493] RAW 93KB 93KB [ 2594.078088] UDP 171KB 346KB [ 2594.078689] tw_sock_TCP 15KB 15KB [ 2594.079278] request_sock_TCP 15KB 15KB [ 2594.079874] TCP 60KB 60KB [ 2594.080475] hugetlbfs_inode_cache 30KB 30KB [ 2594.081097] bio-1 11KB 11KB [ 2594.081705] eventpoll_pwq 23KB 23KB [ 2594.082315] eventpoll_epi 43KB 43KB [ 2594.082910] inotify_inode_mark 35KB 35KB [ 2594.083523] request_queue 60KB 60KB [ 2594.084104] blkdev_ioc 33KB 33KB [ 2594.084703] bio-0 192KB 192KB [ 2594.085281] biovec-max 833KB 833KB [ 2594.085889] biovec-64 189KB 220KB [ 2594.086485] biovec-16 45KB 60KB [ 2594.087070] user_namespace 31KB 31KB [ 2594.087680] uid_cache 8KB 8KB [ 2594.088265] dmaengine-unmap-2 4KB 4KB [ 2594.088868] audit_buffer 7KB 7KB [ 2594.089485] skbuff_fclone_cache 105KB 105KB [ 2594.090113] skbuff_head_cache 523KB 577KB [ 2594.090724] file_lock_cache 51KB 51KB [ 2594.091334] file_lock_ctx 7KB 7KB [ 2594.091918] fsnotify_mark_connector 16KB 16KB [ 2594.092579] net_namespace 172KB 172KB [ 2594.093170] task_delay_info 73KB 92KB [ 2594.093770] taskstats 69KB 69KB [ 2594.094385] proc_dir_entry 455KB 502KB [ 2594.094970] pde_opener 35KB 35KB [ 2594.095569] seq_file 75KB 75KB [ 2594.096154] sigqueue 129KB 129KB [ 2594.096759] shmem_inode_cache 1271KB 1383KB [ 2594.097370] kernfs_iattrs_cache 247KB 247KB [ 2594.098001] kernfs_node_cache 5564KB 5781KB [ 2594.098612] mnt_cache 165KB 173KB [ 2594.099216] filp 1252KB 1395KB [ 2594.099823] names_cache 9286KB 9549KB [ 2594.100421] hashtab_node 278KB 278KB [ 2594.101000] ebitmap_node 1149KB 1149KB [ 2594.101600] avtab_node 4976KB 4976KB [ 2594.102202] avc_node 39KB 39KB [ 2594.102847] lsm_inode_cache 2526KB 3043KB [ 2594.103446] lsm_file_cache 184KB 184KB [ 2594.104033] key_jar 31KB 31KB [ 2594.104629] uts_namespace 15KB 15KB [ 2594.105211] nsproxy 11KB 11KB [ 2594.105850] vm_area_struct 939KB 1240KB [ 2594.106457] fs_cache 56KB 56KB [ 2594.107042] files_cache 275KB 302KB [ 2594.107647] signal_cache 320KB 401KB [ 2594.108244] sighand_cache 328KB 390KB [ 2594.108853] task_struct 820KB 1155KB [ 2594.109452] cred_jar 128KB 152KB [ 2594.110049] anon_vma_chain 178KB 267KB [ 2594.110658] anon_vma 109KB 163KB [ 2594.111250] pid 90KB 101KB [ 2594.111862] Acpi-Operand 215KB 249KB [ 2594.112475] Acpi-ParseExt 27KB 27KB [ 2594.113073] Acpi-Parse 154KB 169KB [ 2594.113678] Acpi-State 86KB 102KB [ 2594.114262] Acpi-Namespace 24KB 24KB [ 2594.114867] numa_policy 7KB 7KB [ 2594.115475] trace_event_file 163KB 163KB [ 2594.116059] ftrace_event_field 280KB 280KB [ 2594.116682] pool_workqueue 48KB 48KB [ 2594.117276] task_group 16KB 16KB [ 2594.117882] mm_struct 232KB 346KB [ 2594.118502] vmap_area 119KB 161KB [ 2594.119094] page->ptl 145KB 192KB [ 2594.119708] kmemleak_scan_area 116KB 147KB [ 2594.120326] kmemleak_object 1205317KB 1205317KB [ 2594.120921] kmalloc-8k 3408KB 3808KB [ 2594.121547] kmalloc-4k 7200KB 9184KB [ 2594.122167] kmalloc-2k 4676KB 5792KB [ 2594.122785] kmalloc-1k 2594KB 3616KB [ 2594.123386] kmalloc-512 42168KB 42168KB [ 2594.123998] kmalloc-256 1344KB 1592KB [ 2594.124617] kmalloc-192 656KB 700KB [ 2594.125234] kmalloc-128 477KB 628KB [ 2594.125865] kmalloc-96 376KB 780KB [ 2594.126516] kmalloc-64 907KB 1592KB [ 2594.127101] kmalloc-32 157900KB 157900KB [ 2594.127707] kmalloc-16 359KB 368KB [ 2594.128314] kmalloc-8 334KB 334KB [ 2594.128897] kmem_cache_node 47KB 47KB [ 2594.129493] kmem_cache 75KB 75KB [ 2594.130105] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/networking.service,task=dhclient,pid=197,uid=0 [ 2594.131880] Out of memory: Killed process 197 (dhclient) total-vm:99800kB, anon-rss:1316kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2594.336242] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2594.337354] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.197 #1 [ 2594.338017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.338944] Call Trace: [ 2594.339232] dump_stack+0x107/0x167 [ 2594.339630] dump_header+0x106/0x65e [ 2594.340031] oom_kill_process.cold+0x10/0x15 [ 2594.340502] out_of_memory+0x358/0x1440 [ 2594.340936] ? oom_killer_disable+0x280/0x280 [ 2594.341416] ? mutex_trylock+0x237/0x2b0 [ 2594.341854] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2594.342493] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2594.343127] ? lock_acquire+0x107/0x470 [ 2594.343550] ? warn_alloc+0x190/0x190 [ 2594.343972] __alloc_pages_nodemask+0x51d/0x600 [ 2594.344475] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2594.345118] ? find_get_entry+0x2c8/0x740 [ 2594.345573] alloc_pages_current+0x187/0x280 [ 2594.346062] __page_cache_alloc+0x2d2/0x360 [ 2594.346532] pagecache_get_page+0x2c7/0xc80 [ 2594.347009] filemap_fault+0x177d/0x2210 [ 2594.347461] ? read_cache_page_gfp+0x30/0x30 [ 2594.347955] ? replace_page_cache_page+0x1200/0x1200 [ 2594.348515] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2594.349100] ext4_filemap_fault+0x87/0xc0 [ 2594.349557] __do_fault+0x113/0x410 [ 2594.349970] handle_mm_fault+0x1e53/0x3500 [ 2594.350436] ? find_held_lock+0x2c/0x110 [ 2594.350884] ? __pmd_alloc+0x5e0/0x5e0 [ 2594.351315] ? vmacache_find+0x55/0x2a0 [ 2594.351751] ? vmacache_update+0xce/0x140 [ 2594.352215] do_user_addr_fault+0x56e/0xc60 [ 2594.352692] exc_page_fault+0xa2/0x1a0 [ 2594.353118] ? asm_exc_page_fault+0x8/0x30 [ 2594.353580] asm_exc_page_fault+0x1e/0x30 [ 2594.354042] RIP: 0033:0x7f4391fe04f0 [ 2594.354456] Code: Unable to access opcode bytes at RIP 0x7f4391fe04c6. [ 2594.355183] RSP: 002b:00007ffc65ac7cf8 EFLAGS: 00010246 [ 2594.355769] RAX: 0000000000000000 RBX: 000055ac22ccb490 RCX: 0000000000000001 [ 2594.356553] RDX: 000000000000000d RSI: 0000000000000000 RDI: 00007f4391fc3cf0 [ 2594.357338] RBP: 000055ac20d98770 R08: 00007f4391f43a00 R09: 0000000000000000 [ 2594.358133] R10: 0000000002000000 R11: 0000000000000202 R12: 0000000000000000 [ 2594.358921] R13: 000055ac20d98770 R14: 00007ffc65ac7ec0 R15: 00007ffc65ac7e50 [ 2594.359749] Mem-Info: [ 2594.360036] active_anon:30 inactive_anon:5896 isolated_anon:0 [ 2594.360036] active_file:18 inactive_file:14 isolated_file:0 [ 2594.360036] unevictable:0 dirty:0 writeback:0 [ 2594.360036] slab_reclaimable:6921 slab_unreclaimable:386313 [ 2594.360036] mapped:8726 shmem:70 pagetables:162 bounce:0 [ 2594.360036] free:3025 free_pcp:17 free_cma:0 [ 2594.363442] Node 0 active_anon:120kB inactive_anon:23584kB active_file:72kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2720kB all_unreclaimable? no [ 2594.365914] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2594.368758] lowmem_reserve[]: 0 1616 1616 1616 [ 2594.369263] Node 0 DMA32 free:5616kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:120kB inactive_anon:23584kB active_file:492kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:648kB bounce:0kB free_pcp:80kB local_pcp:8kB free_cma:0kB [ 2594.372349] lowmem_reserve[]: 0 0 0 0 [ 2594.372779] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2594.374401] Node 0 DMA32: 1487*4kB (UME) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5964kB [ 2594.375824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2594.376790] 105 total pagecache pages [ 2594.377212] 0 pages in swap cache [ 2594.377611] Swap cache stats: add 0, delete 0, find 0/0 [ 2594.378210] Free swap = 0kB [ 2594.378561] Total swap = 0kB [ 2594.378889] 524158 pages RAM [ 2594.379216] 0 pages HighMem/MovableOnly [ 2594.379666] 105056 pages reserved [ 2594.380046] Unreclaimable slab info: [ 2594.380470] Name Used Total [ 2594.381078] pid_3 7KB 7KB [ 2594.381703] pid_2 78KB 78KB [ 2594.382285] IEEE-802.15.4-MAC 63KB 63KB [ 2594.382886] IEEE-802.15.4-RAW 63KB 63KB [ 2594.383486] p9_req_t 8KB 8KB [ 2594.384086] ip6-frags 15KB 15KB [ 2594.384688] fib6_nodes 28KB 28KB [ 2594.385274] ip6_dst_cache 41KB 41KB [ 2594.385886] PINGv6 63KB 63KB [ 2594.386483] RAWv6 315KB 315KB [ 2594.387066] UDPLITEv6 62KB 62KB [ 2594.387659] UDPv6 62KB 62KB [ 2594.388241] tw_sock_TCPv6 15KB 15KB [ 2594.388847] request_sock_TCPv6 15KB 15KB [ 2594.389461] TCPv6 62KB 62KB [ 2594.390067] scsi_sense_cache 8KB 8KB [ 2594.390670] sd_ext_cdb 3KB 3KB [ 2594.391258] virtio_scsi_cmd 16KB 16KB [ 2594.391862] sgpool-128 59KB 59KB [ 2594.392462] sgpool-64 63KB 63KB [ 2594.393054] sgpool-32 227KB 227KB [ 2594.393655] sgpool-16 135KB 135KB [ 2594.394250] sgpool-8 34KB 37KB [ 2594.394841] io_kiocb 525KB 525KB [ 2594.395444] mqueue_inode_cache 62KB 62KB [ 2594.396037] nfs_commit_data 15KB 15KB [ 2594.396633] nfs_write_data 47KB 47KB [ 2594.397230] jbd2_inode 11KB 11KB [ 2594.397830] ext4_system_zone 7KB 7KB [ 2594.398433] ext4_io_end_vec 7KB 7KB [ 2594.399013] ext4_bio_post_read_ctx 15KB 15KB [ 2594.399655] kioctx 31KB 31KB [ 2594.400239] aio_kiocb 7KB 7KB [ 2594.400839] dio 30KB 30KB [ 2594.401442] bio-2 4KB 4KB [ 2594.402038] fasync_cache 7KB 7KB [ 2594.402630] pid_namespace 7KB 7KB [ 2594.403227] posix_timers_cache 15KB 15KB [ 2594.403830] rpc_buffers 31KB 31KB [ 2594.404422] rpc_tasks 3KB 3KB [ 2594.405012] UNIX 326KB 352KB [ 2594.405625] UDP-Lite 63KB 63KB [ 2594.406219] tcp_bind_bucket 8KB 8KB [ 2594.406820] inet_peer_cache 8KB 8KB [ 2594.407424] xfrm_state 32KB 32KB [ 2594.408021] ip_fib_trie 8KB 8KB [ 2594.408618] ip_fib_alias 15KB 15KB [ 2594.409199] ip_dst_cache 56KB 56KB [ 2594.409802] PING 31KB 31KB [ 2594.410404] RAW 93KB 93KB [ 2594.410988] UDP 171KB 346KB [ 2594.411586] tw_sock_TCP 15KB 15KB [ 2594.412171] request_sock_TCP 15KB 15KB [ 2594.412766] TCP 60KB 60KB [ 2594.413364] hugetlbfs_inode_cache 30KB 30KB [ 2594.413990] bio-1 11KB 11KB [ 2594.414595] eventpoll_pwq 23KB 23KB [ 2594.415178] eventpoll_epi 43KB 43KB [ 2594.415781] inotify_inode_mark 35KB 35KB [ 2594.416393] request_queue 60KB 60KB [ 2594.416975] blkdev_ioc 33KB 33KB [ 2594.417570] bio-0 208KB 208KB [ 2594.418165] biovec-max 833KB 833KB [ 2594.418775] biovec-64 252KB 252KB [ 2594.419372] biovec-16 45KB 60KB [ 2594.419956] user_namespace 31KB 31KB [ 2594.420555] uid_cache 8KB 8KB [ 2594.421141] dmaengine-unmap-2 4KB 4KB [ 2594.421744] audit_buffer 7KB 7KB [ 2594.422347] skbuff_fclone_cache 105KB 105KB [ 2594.422950] skbuff_head_cache 525KB 577KB [ 2594.423555] file_lock_cache 51KB 51KB [ 2594.424138] file_lock_ctx 7KB 7KB [ 2594.424736] fsnotify_mark_connector 16KB 16KB [ 2594.425398] net_namespace 172KB 172KB [ 2594.426001] task_delay_info 73KB 92KB [ 2594.426610] taskstats 69KB 69KB [ 2594.427192] proc_dir_entry 455KB 502KB [ 2594.427797] pde_opener 35KB 35KB [ 2594.428400] seq_file 75KB 75KB [ 2594.428983] sigqueue 129KB 129KB [ 2594.429586] shmem_inode_cache 1271KB 1383KB [ 2594.430182] kernfs_iattrs_cache 247KB 247KB [ 2594.430811] kernfs_node_cache 5564KB 5781KB [ 2594.431414] mnt_cache 165KB 173KB [ 2594.432017] filp 1252KB 1395KB [ 2594.432612] names_cache 9286KB 9549KB [ 2594.433196] hashtab_node 278KB 278KB [ 2594.433793] ebitmap_node 1149KB 1149KB [ 2594.434400] avtab_node 4976KB 4976KB [ 2594.434988] avc_node 39KB 39KB [ 2594.435594] lsm_inode_cache 2526KB 3043KB [ 2594.436191] lsm_file_cache 184KB 184KB [ 2594.436793] key_jar 31KB 31KB [ 2594.437392] uts_namespace 15KB 15KB [ 2594.437990] nsproxy 11KB 11KB [ 2594.438592] vm_area_struct 939KB 1240KB [ 2594.439186] fs_cache 56KB 56KB [ 2594.439779] files_cache 275KB 302KB [ 2594.440390] signal_cache 320KB 401KB [ 2594.440968] sighand_cache 328KB 390KB [ 2594.441583] task_struct 820KB 1155KB [ 2594.442173] cred_jar 128KB 152KB [ 2594.442779] anon_vma_chain 178KB 267KB [ 2594.443388] anon_vma 105KB 155KB [ 2594.443983] pid 90KB 101KB [ 2594.444585] Acpi-Operand 215KB 249KB [ 2594.445173] Acpi-ParseExt 27KB 27KB [ 2594.445779] Acpi-Parse 154KB 169KB [ 2594.446381] Acpi-State 86KB 102KB [ 2594.446985] Acpi-Namespace 24KB 24KB [ 2594.447590] numa_policy 7KB 7KB [ 2594.448180] trace_event_file 163KB 163KB [ 2594.448776] ftrace_event_field 280KB 280KB [ 2594.449387] pool_workqueue 48KB 48KB [ 2594.449983] task_group 16KB 16KB [ 2594.450582] mm_struct 232KB 346KB [ 2594.451165] vmap_area 119KB 161KB [ 2594.451766] page->ptl 145KB 192KB [ 2594.452383] kmemleak_scan_area 116KB 147KB [ 2594.452986] kmemleak_object 1207034KB 1207034KB [ 2594.453604] kmalloc-8k 3408KB 3808KB [ 2594.454208] kmalloc-4k 7200KB 9184KB [ 2594.454826] kmalloc-2k 4676KB 5792KB [ 2594.455443] kmalloc-1k 2594KB 3616KB [ 2594.456030] kmalloc-512 42244KB 42244KB [ 2594.456644] kmalloc-256 1344KB 1592KB [ 2594.457234] kmalloc-192 656KB 700KB [ 2594.457844] kmalloc-128 477KB 628KB [ 2594.458459] kmalloc-96 376KB 780KB [ 2594.459072] kmalloc-64 907KB 1592KB [ 2594.459681] kmalloc-32 158132KB 158132KB [ 2594.460271] kmalloc-16 359KB 368KB [ 2594.460872] kmalloc-8 334KB 334KB [ 2594.461479] kmem_cache_node 47KB 47KB [ 2594.462079] kmem_cache 75KB 75KB [ 2594.462677] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/cron.service,task=cron,pid=170,uid=0 [ 2594.464345] Out of memory: Killed process 170 (cron) total-vm:5576kB, anon-rss:220kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0 [ 2594.616886] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2594.617970] CPU: 1 PID: 1 Comm: systemd Not tainted 5.10.197 #1 [ 2594.618618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.619510] Call Trace: [ 2594.619801] dump_stack+0x107/0x167 [ 2594.620193] dump_header+0x106/0x65e [ 2594.620603] oom_kill_process.cold+0x10/0x15 [ 2594.621071] out_of_memory+0x358/0x1440 [ 2594.621521] ? oom_killer_disable+0x280/0x280 [ 2594.622017] ? mutex_trylock+0x237/0x2b0 [ 2594.622448] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2594.623100] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2594.623743] ? lock_acquire+0x107/0x470 [ 2594.624176] ? warn_alloc+0x190/0x190 [ 2594.624610] __alloc_pages_nodemask+0x51d/0x600 [ 2594.625126] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2594.625798] ? find_get_entry+0x2c8/0x740 [ 2594.626239] alloc_pages_current+0x187/0x280 [ 2594.626715] __page_cache_alloc+0x2d2/0x360 [ 2594.627173] pagecache_get_page+0x2c7/0xc80 [ 2594.627648] filemap_fault+0x177d/0x2210 [ 2594.628085] ? read_cache_page_gfp+0x30/0x30 [ 2594.628562] ? replace_page_cache_page+0x1200/0x1200 [ 2594.629095] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2594.629664] ext4_filemap_fault+0x87/0xc0 [ 2594.630108] __do_fault+0x113/0x410 [ 2594.630511] handle_mm_fault+0x1e53/0x3500 [ 2594.630969] ? find_held_lock+0x2c/0x110 [ 2594.631410] ? __pmd_alloc+0x5e0/0x5e0 [ 2594.631829] ? vmacache_find+0x55/0x2a0 [ 2594.632269] ? vmacache_update+0xce/0x140 [ 2594.632720] do_user_addr_fault+0x56e/0xc60 [ 2594.633201] exc_page_fault+0xa2/0x1a0 [ 2594.633616] ? asm_exc_page_fault+0x8/0x30 [ 2594.634102] asm_exc_page_fault+0x1e/0x30 [ 2594.634542] RIP: 0033:0x7f4391fe04f0 [ 2594.634966] Code: Unable to access opcode bytes at RIP 0x7f4391fe04c6. [ 2594.635657] RSP: 002b:00007ffc65ac7cf8 EFLAGS: 00010246 [ 2594.636225] RAX: 0000000000000000 RBX: 000055ac22ccb490 RCX: 0000000000000001 [ 2594.636995] RDX: 000000000000000d RSI: 0000000000000000 RDI: 00007f4391fc3cf0 [ 2594.637787] RBP: 000055ac20d98770 R08: 00007f4391f43a00 R09: 0000000000000000 [ 2594.638569] R10: 0000000002000000 R11: 0000000000000202 R12: 0000000000000000 [ 2594.639359] R13: 000055ac20d98770 R14: 00007ffc65ac7ec0 R15: 00007ffc65ac7e50 [ 2594.640218] Mem-Info: [ 2594.640527] active_anon:30 inactive_anon:5833 isolated_anon:0 [ 2594.640527] active_file:0 inactive_file:0 isolated_file:0 [ 2594.640527] unevictable:0 dirty:0 writeback:0 [ 2594.640527] slab_reclaimable:6921 slab_unreclaimable:386523 [ 2594.640527] mapped:8726 shmem:70 pagetables:162 bounce:0 [ 2594.640527] free:2839 free_pcp:62 free_cma:0 [ 2594.643912] Node 0 active_anon:120kB inactive_anon:23332kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:0kB writeback:0kB shmem:280kB writeback_tmp:0kB kernel_stack:2688kB all_unreclaimable? yes [ 2594.646391] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2594.649251] lowmem_reserve[]: 0 1616 1616 1616 [ 2594.649842] Node 0 DMA32 free:4872kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:120kB inactive_anon:23584kB active_file:332kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660500kB mlocked:0kB pagetables:648kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2594.652944] lowmem_reserve[]: 0 0 0 0 [ 2594.653387] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 2594.654846] Node 0 DMA32: 1272*4kB (UME) 18*8kB (UM) 3*16kB (M) 1*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5312kB [ 2594.656280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2594.657192] 105 total pagecache pages [ 2594.657605] 0 pages in swap cache [ 2594.657977] Swap cache stats: add 0, delete 0, find 0/0 [ 2594.658552] Free swap = 0kB [ 2594.658877] Total swap = 0kB [ 2594.659194] 524158 pages RAM [ 2594.659536] 0 pages HighMem/MovableOnly [ 2594.659955] 105056 pages reserved [ 2594.660337] Unreclaimable slab info: [ 2594.660731] Name Used Total [ 2594.661334] pid_3 7KB 7KB [ 2594.661928] pid_2 78KB 78KB [ 2594.662519] IEEE-802.15.4-MAC 63KB 63KB [ 2594.663083] IEEE-802.15.4-RAW 63KB 63KB [ 2594.663668] p9_req_t 8KB 8KB [ 2594.664227] ip6-frags 15KB 15KB [ 2594.664800] fib6_nodes 28KB 28KB [ 2594.665375] ip6_dst_cache 41KB 41KB [ 2594.665959] PINGv6 63KB 63KB [ 2594.666535] RAWv6 315KB 315KB [ 2594.667096] UDPLITEv6 62KB 62KB [ 2594.667678] UDPv6 62KB 62KB [ 2594.668238] tw_sock_TCPv6 15KB 15KB [ 2594.668823] request_sock_TCPv6 15KB 15KB [ 2594.669419] TCPv6 62KB 62KB [ 2594.669996] scsi_sense_cache 8KB 8KB [ 2594.670582] sd_ext_cdb 3KB 3KB [ 2594.671154] virtio_scsi_cmd 16KB 16KB [ 2594.671743] sgpool-128 59KB 59KB [ 2594.672324] sgpool-64 63KB 63KB [ 2594.672890] sgpool-32 227KB 227KB [ 2594.673476] sgpool-16 135KB 135KB [ 2594.674066] sgpool-8 34KB 37KB [ 2594.674652] io_kiocb 525KB 525KB [ 2594.675223] mqueue_inode_cache 62KB 62KB [ 2594.675818] nfs_commit_data 15KB 15KB [ 2594.676404] nfs_write_data 47KB 47KB [ 2594.676967] jbd2_inode 11KB 11KB [ 2594.677542] ext4_system_zone 7KB 7KB [ 2594.678113] ext4_io_end_vec 7KB 7KB [ 2594.678698] ext4_bio_post_read_ctx 15KB 15KB [ 2594.679319] kioctx 31KB 31KB [ 2594.679890] aio_kiocb 7KB 7KB [ 2594.680465] dio 30KB 30KB [ 2594.681147] bio-2 4KB 4KB [ 2594.681780] fasync_cache 7KB 7KB [ 2594.682361] pid_namespace 7KB 7KB [ 2594.682926] posix_timers_cache 15KB 15KB [ 2594.683515] rpc_buffers 31KB 31KB [ 2594.684078] rpc_tasks 3KB 3KB [ 2594.684659] UNIX 326KB 352KB [ 2594.685231] UDP-Lite 63KB 63KB [ 2594.685827] tcp_bind_bucket 8KB 8KB [ 2594.686406] inet_peer_cache 8KB 8KB [ 2594.686967] xfrm_state 32KB 32KB [ 2594.687538] ip_fib_trie 8KB 8KB [ 2594.688109] ip_fib_alias 15KB 15KB [ 2594.688683] ip_dst_cache 56KB 56KB [ 2594.689253] PING 31KB 31KB [ 2594.689837] RAW 93KB 93KB [ 2594.690421] UDP 171KB 346KB [ 2594.690985] tw_sock_TCP 15KB 15KB [ 2594.691570] request_sock_TCP 15KB 15KB [ 2594.692132] TCP 60KB 60KB [ 2594.692705] hugetlbfs_inode_cache 30KB 30KB [ 2594.693319] bio-1 11KB 11KB [ 2594.693905] eventpoll_pwq 23KB 23KB [ 2594.694492] eventpoll_epi 43KB 43KB [ 2594.695056] inotify_inode_mark 35KB 35KB [ 2594.695645] request_queue 60KB 60KB [ 2594.696216] blkdev_ioc 33KB 33KB [ 2594.696790] bio-0 208KB 208KB [ 2594.697372] biovec-max 833KB 833KB [ 2594.697943] biovec-64 252KB 252KB [ 2594.698528] biovec-16 45KB 60KB [ 2594.699090] user_namespace 31KB 31KB [ 2594.699667] uid_cache 8KB 8KB [ 2594.700228] dmaengine-unmap-2 4KB 4KB [ 2594.700800] audit_buffer 7KB 7KB [ 2594.701374] skbuff_fclone_cache 105KB 105KB [ 2594.701959] skbuff_head_cache 525KB 577KB [ 2594.702547] file_lock_cache 51KB 51KB [ 2594.703110] file_lock_ctx 7KB 7KB [ 2594.703688] fsnotify_mark_connector 16KB 16KB [ 2594.704322] net_namespace 172KB 172KB [ 2594.704886] task_delay_info 73KB 92KB [ 2594.705476] taskstats 69KB 69KB [ 2594.706056] proc_dir_entry 455KB 502KB [ 2594.706641] pde_opener 35KB 35KB [ 2594.707209] seq_file 75KB 75KB [ 2594.707787] sigqueue 129KB 129KB [ 2594.708375] shmem_inode_cache 1271KB 1383KB [ 2594.708959] kernfs_iattrs_cache 247KB 247KB [ 2594.709562] kernfs_node_cache 5564KB 5781KB [ 2594.710150] mnt_cache 165KB 173KB [ 2594.710727] filp 1252KB 1395KB [ 2594.711286] names_cache 9286KB 9549KB [ 2594.711868] hashtab_node 278KB 278KB [ 2594.712445] ebitmap_node 1149KB 1149KB [ 2594.713004] avtab_node 4976KB 4976KB [ 2594.713589] avc_node 39KB 39KB [ 2594.714169] lsm_inode_cache 2526KB 3043KB [ 2594.714749] lsm_file_cache 184KB 184KB [ 2594.715327] key_jar 31KB 31KB [ 2594.715893] uts_namespace 15KB 15KB [ 2594.716476] nsproxy 11KB 11KB [ 2594.717036] vm_area_struct 939KB 1240KB [ 2594.717622] fs_cache 56KB 56KB [ 2594.718200] files_cache 275KB 302KB [ 2594.718779] signal_cache 320KB 401KB [ 2594.719369] sighand_cache 328KB 390KB [ 2594.719937] task_struct 820KB 1155KB [ 2594.720517] cred_jar 128KB 152KB [ 2594.721081] anon_vma_chain 178KB 267KB [ 2594.721656] anon_vma 104KB 151KB [ 2594.722236] pid 90KB 101KB [ 2594.722813] Acpi-Operand 215KB 249KB [ 2594.723396] Acpi-ParseExt 27KB 27KB [ 2594.723957] Acpi-Parse 154KB 169KB [ 2594.724531] Acpi-State 86KB 102KB [ 2594.725097] Acpi-Namespace 24KB 24KB [ 2594.725675] numa_policy 7KB 7KB [ 2594.726253] trace_event_file 163KB 163KB [ 2594.726834] ftrace_event_field 280KB 280KB [ 2594.727431] pool_workqueue 48KB 48KB [ 2594.727999] task_group 16KB 16KB [ 2594.728576] mm_struct 232KB 346KB [ 2594.729143] vmap_area 119KB 161KB [ 2594.729732] page->ptl 145KB 192KB [ 2594.730315] kmemleak_scan_area 116KB 147KB [ 2594.730885] kmemleak_object 1207079KB 1207079KB [ 2594.731466] kmalloc-8k 3408KB 3808KB [ 2594.732029] kmalloc-4k 7200KB 9184KB [ 2594.732603] kmalloc-2k 4676KB 5792KB [ 2594.733175] kmalloc-1k 2594KB 3616KB [ 2594.733758] kmalloc-512 42276KB 42276KB [ 2594.734342] kmalloc-256 1344KB 1592KB [ 2594.734901] kmalloc-192 656KB 700KB [ 2594.735478] kmalloc-128 477KB 628KB [ 2594.736045] kmalloc-96 376KB 780KB [ 2594.736627] kmalloc-64 907KB 1592KB [ 2594.737187] kmalloc-32 158140KB 158140KB [ 2594.737773] kmalloc-16 359KB 368KB [ 2594.738360] kmalloc-8 334KB 334KB [ 2594.738927] kmem_cache_node 47KB 47KB [ 2594.739511] kmem_cache 75KB 75KB [ 2594.740072] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/system-serial\x2dgetty.slice/serial-getty@ttyS0.service,task=agetty,pid=224,uid=0 [ 2594.742055] Out of memory: Killed process 224 (agetty) total-vm:4336kB, anon-rss:120kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:0 VM DIAGNOSIS: 20:28:29 Registers: info registers vcpu 0 RAX=ffffffff868a77c0 RBX=00000000000005d1 RCX=ffffffff8126b9ab RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff868a7878 RBP=0000000000000004 RSP=ffff88801edef6a8 R8 =0000000000000000 R9 =ffffffff8686179f R10=fffffbfff0d0c2f3 R11=0000000000000001 R12=ffff8880517d9a40 R13=0000000000000000 R14=ffff8880517da388 R15=dffffc0000000000 RIP=ffffffff8126b918 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faf2f5e8700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f42769cfe70 CR3=000000005158e000 CR4=00350ef0 DR0=0000000020000080 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f727474612f666c65732d6461657268 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000050 RBX=ffffffff8539bc00 RCX=ffffffff81f32484 RDX=00000000000003f6 RSI=ffffffff81f32492 RDI=0000000000000007 RBP=00000000000103f6 RSP=ffff88801ed7f088 R8 =0000000000000001 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=0000000000000000 R13=1ffff11001e98001 R14=dffffc0000000000 R15=ffff88800f4c0008 RIP=ffffffff81f32496 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f687c23c288 CR3=000000001b230000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000