77427ee66fc49eb49ab711a22718dbc9d98c0faebdb10e4233682ce22e7fc64435e5271d6399a25579db4f18af8a7fe59e8c8ecc4b073589d95578cc88b4739c35ff34ce1e25f4b8130ace72c1ab5b8a000000000000", @ANYBLOB="0c0cd90000007a2037b738e9"], 0x2c}, 0x1, 0x0, 0x0, 0xe0}, 0x0) syz_io_uring_setup(0x21, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) dup2(r1, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:37:16 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffc000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x0, 0x80}) 01:37:16 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4002}, 0x1c) [ 2377.901044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 01:37:16 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5000}, 0x1c) [ 2378.018913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:37:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b4c, &(0x7f0000000040)) 01:37:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101}) [ 2378.104631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 01:37:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) dup2(r1, r0) 01:37:16 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2378.170904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2378.234012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 01:37:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:16 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5e00}, 0x1c) 01:37:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b4d, &(0x7f0000000040)) 01:37:16 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x6f, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x10910}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/machinecheck', 0x67fe2e10fad741c, 0x42) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000480)={{r3}, r4, 0x4, @inherit={0x58, &(0x7f0000000400)={0x1, 0x2, 0x9, 0x3f, {0x0, 0xcd49, 0x7, 0x4, 0x4}, [0x5, 0x7fffffff]}}, @name="5fa7e94afb0d8135f901dae24e2fae51ab5de45a721473ec458b04f552c70ccd13c0bc1347a4c936755a36e53a00dcdaa9cfcfedaf956a64d301b8c3a56ecc1948cd3c7fcab9e8638a937569de96e207967ad430b59fc8a99c8d24f696a60781c81a7e6a44cb8756a982dcb1c47d3b06652769ab3c111dc4848d0b7d23463e7cddee2f8c64cd5f5174724a8c326dcce58b73ded44e94e79e83dcf9151973a4c32f332b926386ba6089a782bef2294ce7d255e92853370de54f24976faed7ab0dc22cef5f8180a588ea89e34321fd04a0e00ded88c6021dcbb4468d374895bc96824f1029acb9ece531bc0a6afc94c092b372c7bf6878ee4287c1e9d8dd3127a1d4f820e36b89ee3a1f87419eeb2fb0bf125f9a9497fdb762e51947da57d6d6750cd76c6591e6ec8d3d47e8bb1a992fb021a4fcaffae23d0d6cbda6768b2d0f21729902ca85c623afd424e2bd6c2b02f43d8fc471ada65d20eb570d38ffab341d19b141a7bd7826aa7af86ae7f0c1e800676271f15c485946a887f81df983b7dae3c9c8b12b4bf0c2e0f6218805b34e503ae3df823d55abe599785ddc54ef2d130a7b8219da2d39adf1c7dc1e88c6eec3e81fedd906110c6360a2f42bccc501dffd31fabd64f2081089bdc12c8760d6d4ae0f41dc258b0fe1c0781773563f6a97b7a045f527ed5a3500a6373cdfc5daad796cb427abb7cd9158a78b8284cc0a77ff94ac3403ef239fd507207a0173b8e39675ac2299cbe7e3c9229c64290f5370239905e2d5112e5f16dced82c6c06a14c25d38830eccb7d6e5b863991c0f33030036282667b853ea8f1ce13d74f9387b5979bd5f1c3c9b8def7b015d3803d5619b26d9bf7f2fdb5621c5395b67aefddf7afd0cb4bb31646b367fedbdaffc8efcc12475b996267ecfa1df6c321dd65e60a9b3b7784796afc4c399bac6f7d2cc961e7763aa3b26b935790ee13b7237f6c48ddeab37b9a2d6d53a16bd73c48f47b7de668a31a58e67b5e53d53b9a808cb660667dc36ce81b78c9e943ae473c6ddb3c3de9ba5aa85dd83530a044ae12325f50b9574948a0e8bdd11fabb51b0838809e0a4ff18ad65175639db667dacd0b4ddcce8bd006c11d472c46c77ce51ac817a0f85d52da33e53d16cad65be612daf337e1022cbe5f2dde3a6a41336188256ed64d387e43cfbb2e993f0225f2ddca2e776c8f5909f56fadbac79f4bf6f9b9a0c737a5d29e80a77bb15311aed8de8c2e7c036bb70bd3691c170689f91323e2309b7e6629d9aa7bea2b31e3a0857dfacb0a0bdd36f9bd333eb8c4855f7602df7d0f9ac7d3c3f6a4584e8a65627f2f9c60926e2e811519946a48c8646e1e7a6541076cf8669afdf4c51cea5fdad34ad90af195057e679ffd5103cde5a4c3c60e2ae2fcf180881bf449783bf1d4097c1171897a360d9fb556b76fbb1e758390e362f718daf4ec2c3bb7ca5ee1944179e477029ce7e052abac978f92e063242adb0b20ec6a621f275215d308599fe2f28812f895162fab9b22013498320bcfeccc467d3c3064ab94028de89dde0f3fbf230cf5918fa329b0a8c0a901e72a62c3854a17c23fcf97fc3f5d0e3cdf3f533277e3082209cf6f4cfed40ddb19543fce159e581c6199182eb96a89d5eeb66519c52e666ef697169527ea45a16b856188ae2ace6c9e43b28efbec2086e85c9f099a95149b70b9979dbf83500ea048e2ac85b623000a167402cef676ac6e2ae8fe486ce0d8283419a144b82d0bc63adaac2a951d38e09ed0df8ce76efa91178229bc08c61e7475f9e318407303d8615126358358ffb4d9cffb58ae485dcec599030d3c40e1cc568f09899f6936361ddd35f5526d7b30024949270afb54ce7af3a0e14b719ebfd75a3a901bff26a690cc50ddb450e25f70c809635741e4ecd01df23c2d0fd47589159441d39d9452e907783fc11745831a898b361c6e5f79c1e77e115208a3923690a5436ba3c5a9c45a2b4a18eb6574d3f3447a15aee4370f770ac14d7f6a491fe8360cf3c4cb19504e8a78ab6b9eed4a66c1b3c12947c76e533ba725975dc59849123cb6a3cfc2df5658ba51ccba6e1f4a3f1960d661bd79277ecb01b98ec705f9ed2ee60d0095714ecb3ed3eb570201ee959b7ffa10bc4ba8c56724a0fa7fea5c140e45bbe45a071a61a6bba38df2386cae4b66cae8664790fd86d7e17780c9e354659176accbdd400e4404993948675483dea689c9011958b640f6f762f9a7a236aa2ad8d1098240f1cbc438632f47f34e741847f10ab00cddc2573e86efef361eb0d302505a707101553335eac961a5415c1c327f289462ebef425dff35e5b62612b5af4ec29dfcc279424e7305b16de2bb1663fd559cb6d24e42be0185207f2555beade0eff6ec33514e79bfdee4a3fab3e581a2da490f61877e3cfb32070b0f926cd300623a31e875cee7c72d5d94787f3af382ff2601ce4bc283d689cd5c4913274bffc5ed473d1d231e1b27df34b357a8bbfbc70a8b13f99542d1fe18a7168fd12155962dd456e035913f3e227957f03ecca440e910b4f6bb47244789d61c319b657b2158f426a3b9d7eb9e04dcb25adc3dd4c7a4cb887b34ecc17d5218a94c0bb24003dbb5835b6e3fd801da772f2e192569e89bbbfd0a91e2acd9292b0b9ef71c20625bd642612b46e360bfda8eccf920d125f3737e4d96150241587b3ee0c542789d05da684e5cbd9df17f3edd210e1a6dc9c63ede0deae10e4a6fec0e0eaa4d1a9e21fd8496af250d725d29d27c97938ac10de928506112ff48e478f5de5179d49bd1b14f329eb3b005cb92311bf0cc4cd259a8533a8e728a0dbdf2d7d413009d4759515be7272808ba7d11d65ec20b830f3cf8187a8c9d573b100531a72c73c54c058503bf6524301c54ea6ad7a918e8c3f9597b8c878356d77744a60ea3fe8f739741cb06c365b53391c8ef8d080d22f458d7bf286d48aef197e1fb9867ecd356167ffa6c568bfec35bf7a419362c6e9bbca12ca7fc58bfc26dee8564e9fd7f61030d62a8be1fd4e545c7667259df8277f3496d1a52a2c7bd540430103395ecae6601b782d6df6d6995ec59d56a8e5381e5bc1b6f35cfa74593b5d90809ef23f00ac80aa2464e00464dbe501656ab47caab0fbfdbc53614ecb87bdab58ee7fdfb321f4e6b864bdc50ee35d50200d0a2690ecda091909de9a5cbe1a4f6bb3f9edacf1c21958901883b6ba0bdfe3810663a0e2baf9e9538bd39299267950ca2fb89eb605956e44c7c4bef0ac91738cf4e0e5b771c71ec60664717547cc7bab97b22f5d1df4a644ea0a47bffb3e0f226fdb585658d9d9aa9ef728fdaec06d907c3004b85e4e24688607e364b49a45453b3ddd12a799fbf387a076a6277754a9bc28c60039152493b96d23bb5eeb4218e4e6881b8041dffd2676ecb61f901e7d500db6c19fd16e23e30cc8a166f1c5e186d9179fe8cfc6f984cbf724f285587ba823f476907899f1dc171ccc2e3e23d63c7bfbc07c29c84f3273961494d4732770d9390ed60db22b896c4c73738d3e6501df16eb06cd470889d34dc1d269a54796da843671bfd4f2e8f58d4a912b31118f955199d2a0c86874be81769af683b42ae882782c24ec392bb1a630c1f0f288763f96313c0ba79e38550c4d4d91a910d6b2fcfaab9bb25ac7631d958706d83f78bd4cb491c5dbcee4c6e9753c3c6f19f6e4716e14cb4c593546c946629ae025c06f0085400718f9db3708367f27628299fc962e4e9dec3ef54dee1c54a208e335fbbe5eb8018e590130e26e1b482b2b101e5ba5ccec783a505f927aaff011f0ac969b32b425a5f913fd8be85aec709316e7411646ad3785e6b98b726686e71e6463ed0641103d25ed02f604237cdefbcd4cacd1eb080bc69e87cf0d7cba726c4fef0dd0df7b38dea75fad907577c69d2fe73f3263333b3edf2331125f29128b80b53545ed641bcf674231eada11c923519042d243f605a96cd9996778ff603731d5987e76e8784d88f63863db19df726829618a17f47065644739699e6d9eb337669ed603c4a591f4232138e5f2bad12d24ae0fcee955f4519b80f55420bd757c96c72b67fd1ed82cc7e0f0bfb3640fdd5f26061baf4bdfbe9a27b5c8f2b457637fb308f56d63f3a267c336e9cf4da0956559db525f46796348f0ddad2b6b9a076974b37ea5961732795c413b1c818d20b04ef981d88d2b01f6614083a031acd1f4fae8af41a1bf265d60b2e9ba30a4472a64261c65a3f69211bd54f06695c2e255682c12ca05313c8a3def9e9a37c37a06b1ada14e9f1beb700014823a584d76468628012a2dbf09d7472498b7a4bbae752bc6bd8756f8e7830e5f28fee8069f4c51befc0c45381c03ed2d3cec27d0116be36f8c281401bad469acf1197ee0517f1567585ffdf938b1080bd244b5358ebb9c0f95d8b78d87816db363160449677fbe81af9652cab2d3121aebd7d5e85eff0ff35053374989d2f7a1e0b23bdb4f74916211c34d8435cae8754672028a095f795fa4a8c82a56c0fc4a3cc20ec65de21aeaa12e2e2b3f4dbd2c191c44627f78d7897ecbffcc5dfbc0bfdb1c4241fd21368f0099d269630a2de067e622cba8672249869c80960c157ab454f29d669f05891d28aabfa427747fd99d1c91a5e13dfa34188b055691cf04eddfaf8ae359153865d24647b31876595b00f3ce6e35b85dccd539b014799549aeab80d6091e9c7b6dd6fbac44fbde8831dc06f9b5524b1d3cc708d2e3bfeb116ae7ae5876c01e3bc3ebc407bb616865de24b8b6aec891b2799b949ddd1c69c46835e4cf36eac4018974b1a71ecfb86c48c52c3955daa9520277b53fbfa34b3a8b1a4b0f06bdf77d86dcc8a1bf40c136d3bbc025a405b1ffa8578228b1cb6e3386e3e5253af0a8357c23493abc4e77f8e13cf6943ceb0cf1e8d4f72280c6bf42124dd791c1f946a33e879da32c933eec7f72402b1fa12327523e4c7890038bbff5d21b3d854a5c7018b6e98f23fdcf4b6383a29332cbf8e1dc7d6e2322ed17522d0508b6990e55f079daafa238cfee104009613dab94a80eba3e607248aa7ab7dcfb329f9f632fa00d0e77f9d771da473268db241e3383c398d37af23f55b832799771c9db0bbb783007cc3a0f6efddbaf041e72d27d71ccdc118ae0f22b617ce7197c052df44fb9b4a3c953a7b4648e5c1fd99f7dab168abf11caa98fa2de189546ad32d9a12b684e0ebded5bc291787677411b2071a1660aaff0ca5b94a96e28ec39a176241a185808547c6063d37a06ca981bb3f58db7cb54dad7c13ebb2b5bf74140fbbba98da07e27c2d553d8da2de922c0efc1093af492bee72cff8be0cd32ae1b7b94328539158cd0ae5beb000667d5a547e4c3bb14c17e14e5e3f91a88259269f015e5e3830bab996370ab446c494a6b3611e5df6f44d97b00348faeec5c4ba23accca370f5310c9d652d75b1ec31dfd4707857926a98f0d06eceb8e9c250642c424bda1eb42921f19b3d592d0962916aa1805ef91bb0d22cbdf72eabb5f8e02cce7b5d79e23593ef96985bd7cdae7eb3ae5521c8fed54ddcd3cfd1239dcf6e2be1a278461babd0fa46d2b0ff49c40628525bf682f57e1a1ac47d4fc5f25cfb8dc3fac6451ceb6ac2bc3f98892e0a3e86908d693b4eca53198ca273cb0eb9acf0578f7172c7dfcf9a779ab04f08831961ba50dab0555bde666208e64f579f9297e"}) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x2, 0x8, 0x93, 0x0, 0x4, 0xc0, 0x10, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd4b0, 0x1, @perf_config_ext={0x168000000000, 0xd7}, 0x40, 0x1ff, 0x0, 0x4, 0x6, 0x1, 0xfffc, 0x0, 0x8001, 0x0, 0x7f}, r1, 0xb, r2, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x304, @remote}, 0x0, {0x2, 0x0, @dev}}) 01:37:16 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @empty, 0x2}, 0x1c) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0xb5, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200001, 0x6}, 0x40800, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e9b98228edee966412abd9598f926229a3005c299f1a766f5983261d43054c0e4de3f7d798258ec84293d795fcb8c337a5024bab874fb08f4e939868e2559c2e7415509daa849892ade3c19bbc852f2990b425732ca682e9e179c9c64c53814a47b0359fe469d57cd44e9215c1b5ad29dd9083a7fe2dcbca1d2486d99ea06c7d73b6cf662705e2139d7b4e35ff5882f8cd8c2a9b4af2658e16113f963d30ea11d8d213dbf78b9cf8f186a2774f73e01bf6c999e9307178d56fbbbf0b1b83a6d0f7b63a42d86885be73fd63b399579749373be88c097172d5e58fa230bafa3bed4fd7d053f9b26a1b1", 0xe9}], 0x1, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x6c, 0x18, '\x00', [@pad1, @hao={0xc9, 0x10, @private1}, @generic={0x0, 0x17, "8597546949f021c6eab15ecbae292049bb34e9c2b9ffe1"}, @generic={0x3, 0x84, "172c4c5045366a80624336eda205f1204d6c1bffa5d5b6c2dfd6dfa77a05ce0a4942050bcdb8e9bd3688eca1c580e12a799a18da9f2c17ed6a68014526a5561696593cdc2bf9863c94e872f30d2a468a34950f81a4a24baabf60dd67813dfab888f39be9128b195da5aee717ff4deb099193b0ee89b513ac6a648565af8b3e02fcdc1b80"}, @generic={0xff, 0xf, "394c4344bb5a85ebb769fa90da4e78"}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2e, 0x10, 0x0, 0x6, 0x0, [@empty, @remote, @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, @mcast1]}}}], 0x1a0}}], 0x1, 0x44800) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 2378.484920] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:37:16 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x80fe}, 0x1c) [ 2378.536293] EXT4-fs error (device loop3): __ext4_new_inode:1068: comm syz-executor.3: reserved inode found cleared - inode=1 01:37:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) fdatasync(r2) ftruncate(r0, 0x1000003) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) dup(0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r4, &(0x7f0000000100), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1a}) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = pidfd_getfd(r1, r5, 0x0) write$P9_RFLUSH(r6, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) 01:37:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000500)=0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000640)) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x8, @remote, 0x7fffffff}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) fremovexattr(r0, &(0x7f0000000840)=@random={'trusted.', '\x1b\xc6\xe8\x86\xdam\x1b\xe48\v`\xdeH\xf4\xa4c\x00\x17\xfaP\xfa~\xb9\xef!=w\x81\xfcJD\xd9\xef!\x88\xec\xc6/o\xd3\xb1\xfa\xf1j\xc3\r\xb0\x1eO\xbb\'c\xfd\x92\xf5j\xe6MBO\xc2H\xd7\x85s\x10~H\xdc/]\tF\x06S\x898\x9c,\x95v\x8fe\x82\xdd\xf4\xb4_\x11\x8a\x04;\xc2\x94\v\xc2\x1a5;\x88(\x80j\xbbE\xc3\xd7B\xa5\x85\xeb\x06\xe6\xa4l\xff\xff\xff\x7f\xa7\xa2\xe2|i\xf5\xe8\akj\xa8\x01\x104\xad\x90h'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000600)) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) 01:37:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b4e, &(0x7f0000000040)) 01:37:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101}) 01:37:17 executing program 6: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x1000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = dup2(0xffffffffffffffff, r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x80000}) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x38c, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x100000, &(0x7f0000000240)=ANY=[]) openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040, 0x82}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc0c0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2378.802781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2379.196901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2379.398972] Process accounting resumed 01:37:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101}) 01:37:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6212, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x3}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:37:32 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f00000018c0)='./file1\x00', 0x0, 0x1, &(0x7f0000001c40)=[{0x0}], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) chdir(&(0x7f0000001880)='./file1\x00') r2 = syz_mount_image$tmpfs(&(0x7f0000001b00), &(0x7f0000001b40)='./file1\x00', 0x2, 0x0, &(0x7f0000002140), 0x200000, &(0x7f0000002200)={[{@size}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\'-&'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsdef}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/dev/vcsu\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) openat(r2, &(0x7f0000002280)='./file1\x00', 0x4388c1, 0x8d4ed64748a8c0d6) recvfrom$unix(r1, &(0x7f0000000040)=""/255, 0xff, 0x12002, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = accept$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) recvmsg(r3, &(0x7f0000001840)={&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/99, 0x63}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/234, 0xea}, {&(0x7f0000001700)=""/160, 0xa0}, {&(0x7f00000017c0)=""/22, 0x16}, {&(0x7f0000001800)=""/22, 0x16}], 0xa, &(0x7f00000019c0)=""/210, 0xd2}, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x10200, 0x0) openat(r1, &(0x7f0000001ac0)='./file1\x00', 0x200040, 0x100) mknodat(r4, &(0x7f0000000200)='./file1\x00', 0x80, 0x180) 01:37:32 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:32 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xc0fe}, 0x1c) 01:37:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b52, &(0x7f0000000040)) 01:37:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x81, 0x7f, 0x3d, 0x0, 0xfff, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x96, 0x1, @perf_config_ext={0x6, 0x2}, 0x400, 0xfffffffffffffbff, 0xffffffff, 0x8, 0x7, 0x5, 0x4, 0x0, 0x0, 0x0, 0x811}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='/dev/sg#\x00', 0x0, r1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') unshare(0x48020200) r2 = open(0x0, 0x301002, 0x80) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x0, 0x342}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="89eb26aaaccf1aa8bcbc8afa20b62fd452788b5a0e89e30f916152000000"]) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3, 0x6, 0x1, 0x9, 0x0, 0x4a0, 0x41324, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xab1}, 0xa000, 0x3, 0x97a0, 0x9, 0x13, 0x40, 0x13f, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xb2, r4, 0xb) [ 2394.123958] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2394.135154] EXT4-fs error (device loop3): __ext4_new_inode:1068: comm syz-executor.3: reserved inode found cleared - inode=1 01:37:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:48 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x60000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) lseek(r0, 0x4, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) faccessat2(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x200) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x7f8, 0x9089}}) read(0xffffffffffffffff, &(0x7f0000000040)=""/2, 0x2) 01:37:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:37:48 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xe803}, 0x1c) 01:37:48 executing program 6: syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000340)="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", 0x121, 0x4e0}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="47f1a5ba20"]) 01:37:48 executing program 5: perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40a0, 0x1f, 0x400, 0x0, 0x100000000000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "1648ce7f96773d524d63869aee2908a5e18726d0cc68a81ac8066d5bdcb2cbcf24235739bf6deed457043ef1f8780be3ea7c8a1f9c2bfde98e682aceb08f1d1373ca9f5023e455b1977f46fa230ff6001ed2967abef7c1399cb45bc2135e90e66a6c995b0e7944d5f41bb2f4a7cad6635b2b40f11e726bbb7d3bb096ca776ad83966bd92e93e00caf6b75aa68e4dba479e67b52007f8063b3829d5e6cb9590ebc06bf5b6ba59e4ab97ec0f57406f2ec446d3440aabe686d0187b54297a0400b58c4980ff9577366b42fb1a154838da34b4e3c16268319f8ba283259af50fdc051b4977524ff822a59a230ecf36e2b97be172e63c0554924316ca071218edecc63dc8e3ae6f4a2f4a10dbda43c7631cd93c8b794a7718ec28f9b3bee242f8cda1f65eb4c763c03f43aafdc32c969f6583f0989dfaa0ec426ae8eaf31515297c97a4d279f9e123c57aa7a2c4a23f8db16ac7b4e25601d3a75f0c44ebfe141a345a59b3fa3977aea482e8371da225b3e599959dbf119656c7522dc42033ef9436b6ceb0766e7f6887dc3c01a59d5aa666b9cf4e0fd3af72aa073f5fe671067fbe0818ca5bc936ae5690c174425d768814e35b0c95404c55be5dc33cf7c016f5972a3d0309f46dd89fa06e2a6bf5c4a88f6c57b0ebbc5617b90ea6cc1521bc0929608252e995006072d86868f0b18199309fa47febe68215b1bb350ae39f5f022ea6020d6ef3fcb2af708411a303e4820b0ed15e48fe0fc3ed83e9a75262239575da94407b7f13a4afc9e4466e229d9f4ea93519cf035a1c38ee58af96495aa2c26d0e24541580ba0c978cad61430d3482af807fe8202999237683360334846b88c7b3963478cd3e26f4c293dfd9271cc015e28083c7a11fc96d885592fa55f0830abcecd67e7e852b1e566bb518acfb77203259cf139a7d52154466d0562c78bada836e9e32b70524428686590a80fc7fdcdaaf441ac0f7e7f3451c3655bc066f7f50f568a4b9912bb27876319f8aed58f3557ef52867d8931ddb1ec1356d2e80c8d21542d5fb56e1afc50072a46f7751c7c73872f08e069bab013e4fbb471285f00a9936a53f66c148a74462240e8ec77579471819d98282c7ebd83a1e08e4389758525ede76462f307f04bc9a9afdc92abe55a2e4b1b22f514c09e1633279a56af3ac6b1ffb7cc1d212667fcc2c131ea3e0f461596a13fe236293bf7a31fafbbf78642e576b58e434515d7aca97a144c4522ce1ac91ba671fa7817521d2f4beb7749647e787e163736a4b822999ba7474a25ae7766ac1ef14094981cb4128931cf2ab52b1365ff7f9b809090fe4dde2818e66c59f065f65308771846d24b557d98fd5e8bcc86579d02a62bf5c09a2a0041c0f06fefa81e3587698a92133c1a327a3cced7491eeb5d01e81bc1cdbd3e75016e1e8f247a65d210fac7279242d8069922201a99fe4965c1f449bc6445bf6e0fca0d983fbfdc384859f057919a5b80578833c85f17822f0f156cdfec797508f47430eb4f53054d5fc952579a4c45e4c7ca7eba344238b97ba3dba62fd621849eade92ee34ac38f6dcf506dfcf5ab921b14ee75e0b198382340697a4fc3c09cd1dc1623d1b58dccedba4c09d5f0d7bd905ceacf45040834b6616a312c0209df3d04399a104bfcfbb220094dccb5b288298f670673177597cc16a8d8f00c3d8139cdbcb7c4b5ad67a2fbb3d8e7b6ca59618c3de92dd2c5327c3664bab8ae5ca3959139c89dc91d20126bd5c144c8cac5cf0f38e848425a03ac42cb1561cabe1d58173df87f1e304f936efd7e89495ae6bbeb414a0f86be8e4a769b6f375a30a5b19d63cc2a086d7db79559a58cdb3db46d56444931426b03cfab73e8f6672990e846daca45d8595fe0fb38b3a2d486023a48a18090ad7df1ad66f3995f1f58b2585ef9879a9e0cf8cd509f90274825223e22184d254f6f5e03b3f1a146d96cf3369c968c0e08de06e5b6f259f8835d3611f7b9fd8844a885bd2983f5b9b2937392ea8b35da77f92d055477ad68b658b91a03c63951ec591e122a1ccc0efe9fe0876fa4fda7b2f9bbb1081e4bf8afc825177ca3336d4308e27d8aa86d52fc031f8c2f96f704d444cfba838881da0499c3ed0a0fa246b40053d4da8e6f6cec1004fb7d869f9457439a98446f8f27fafc7d481d42416e7e9dcbc0240febcc677173dd183531aff5d9b70562cd7dba8cc7d9a30019305271956023e38b2a3fa6db7f856dc633f15f87f27d5a4d97251099a3cda71e23d921255b47fcbcf670e149876048d7d5fb068f9efc648e85dc3715f1d488698375e3f3ceed171cf3d5d6b634fc4bca47fd0187a7b7f40b933ba269c48b6a54e5a39037ed2c5286eed37d9c51ba52e309508d82085f0f812e41ff975b4e1194bf88132174c0e0faa7839a4af766f332a974157bc6ed728819b1ba90ab0575d585af3feb1cfc2a725e1fb93caa012da084e8fb1fe6acc9847e5e2ab9937c66feec0b0d18fb3114c4a483e3e3c6c826942fee33afc273de284b151f7439946273f9a719ff0fb1412d6f9b658c364b04d506f71bd630c7840ce7a296b0d2f00b016314653855ed6a1d862c07206d6adcd8b7097fa1b7cbf9a4dfe30a7caa8ebe561e765b632435486faf51d33df1bafbaf9d320970c8ca357b464fcbc80572b192e76ca984ca1587d3b5e01cdcd79f4844938be361bb6446bca9cf139b139b40950b9a681557432bed01fa5533420b66249acdfce028d8650639b3597fc6aa6bd383b6de8f3f6f52a8e03d9ab1ffaa37a93f5d850bfed5607121ffa8cc79298f3057f8d3637f8aef13dee32ebdc7479bf1e39e8d46d0c3fe747ae16cff4ea1cb2b28c99180dd1030bf3e30f1ae5c7e07acc953f43a2e4fa8c23d6aecacfdda9e5fe61c4751c1ec90aa3749b50ffb9949501baca0c5a007df8d160f639a93b2ee384259f00e53cb6fe15fe3a5a63d02970206475924e2e965ebe78ab5cb1d677a8f1f6b09c376924a5911cbf30f7818055dea75b9f5fb6894d797aa5e50760f0d4d1e0bcfd530fcca2147adc14f951db7f332dd46608a3cd3058e32b7f67fd7a888a7052153859eff60ec509a9310815174865b225a82a180b3021293f900f92989fdcbf3483825956b772b0ce0e01f7241de8a366d7ba3fde88517539c967813cb1f134153f905f25446f8a5edb8b4e3c73d69808b2b7386724f715cf349219c819573d66a73235add47e87dceb9a184c47bb65ba9efeca15f013dc84cec6e12b724ec85790b0f4a5045c7a5e403f10d37d40b881e4f4474aa6be1da6015617edf0f5b97bdc1da8a3dacdf3c0dabb15373113d79e6ab2d4fee4f8aad3922a3f1730d1350545607ae1a7fdb6e8c93340baa7d531acc4744ca956e31303ca3da8c0f050464c9a74c85f462fd26949b8ad4044429e2009cc4f9b1c3de5e944fa01f1b07a8059c4df44a5921856315515cb06f8216a6e92f7f43cf53e6cd3511ded76ffae1be469fdb013014e54085b40ca8b6cc073ccc026da0dbab42f3025391a259ae881f00730377b3c8a1f42b2bdeccb75702750cb84fb29c235a93b978f959ef61957ed7ce5750986ca4b4aefeaf56375f8263ff42d8399480a15834691585187b5a358b093285819c9befb7f724075204b9f8744e6b706c4ffe842f0d83216530b77f07992e58539d8aafa1a7a153526d8ca26881b05ef51f19ce8aaf66ec7c4cb2ce4706dbec8e1f3128f9b72a40cad6f14d7e940ec9db856c785c572193f1c6c4b4ecb8e7eef1df23412bd5fd2a97bba5ca04c186c9abf3c697ba4789b3166"}, 0xa8e) fcntl$addseals(r0, 0x409, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) 01:37:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000040)) [ 2409.701969] FAULT_INJECTION: forcing a failure. [ 2409.701969] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.703796] CPU: 1 PID: 19619 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2409.705066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.706289] Call Trace: [ 2409.706747] dump_stack+0x107/0x167 [ 2409.707272] should_fail.cold+0x5/0xa [ 2409.707946] should_failslab+0x5/0x20 [ 2409.708485] kmem_cache_alloc_bulk+0x4b/0x320 [ 2409.709263] io_submit_sqes+0x6f76/0x85c0 [ 2409.709850] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2409.710694] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2409.711384] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2409.712210] ? lock_downgrade+0x6d0/0x6d0 [ 2409.712794] ? find_held_lock+0x2c/0x110 [ 2409.713475] ? io_submit_sqes+0x85c0/0x85c0 [ 2409.714100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2409.714777] ? wait_for_completion_io+0x270/0x270 [ 2409.715459] ? rcu_read_lock_any_held+0x75/0xa0 [ 2409.716105] ? vfs_write+0x354/0xa70 [ 2409.716632] ? fput_many+0x2f/0x1a0 [ 2409.717153] ? ksys_write+0x1a9/0x260 [ 2409.717704] ? __ia32_sys_read+0xb0/0xb0 [ 2409.718279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2409.718988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2409.719716] do_syscall_64+0x33/0x40 [ 2409.720235] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2409.720940] RIP: 0033:0x7fb499895b19 [ 2409.721455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2409.723991] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2409.725043] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2409.726037] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2409.727019] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2409.727998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2409.728984] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:37:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b63, &(0x7f0000000040)) [ 2409.796725] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2409.803469] EXT4-fs error (device loop3): __ext4_new_inode:1068: comm syz-executor.3: reserved inode found cleared - inode=1 01:37:48 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x80ffff00000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:48 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xf401}, 0x1c) 01:37:48 executing program 6: mount(0x0, 0x0, &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x105e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x49800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x24000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0xfff, 0x80000000, 0x0, 0x7}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'veth0_vlan\x00'}) 01:37:48 executing program 0: r0 = socket(0x18, 0x4, 0xde) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x802) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r8, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x33, 0x1f, 0x5, 0x0, 0x9c, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x4}, 0x100, 0x8, 0x9186, 0x2, 0x8, 0x5, 0x101, 0x0, 0x8, 0x0, 0x2}, r8, 0x3, r6, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0xffff) 01:37:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800210c00000000000000000a00005bc1170008"], 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="000040005b8383f8214f3ec515ba1c", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf250a000000060028000000000005002f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = accept4(r0, 0x0, &(0x7f00000001c0), 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1cc, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CT={0x190, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_NAT_SRC={0xd0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000085) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000200)={{r2}, "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"}) 01:37:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b64, &(0x7f0000000040)) [ 2410.158646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2410.223255] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2410.234010] EXT4-fs error (device loop3): __ext4_new_inode:1068: comm syz-executor.3: reserved inode found cleared - inode=1 01:37:48 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfc00}, 0x1c) 01:37:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b65, &(0x7f0000000040)) 01:37:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:37:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:37:48 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x22, &(0x7f0000001780)={0x13, 0x10001, 0x7}) timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001340)=""/245, 0xf5}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001440)=""/162, 0xa2}, {&(0x7f0000001500)=""/91, 0x5b}], 0x8, &(0x7f0000000280)=[{&(0x7f0000001600)=""/217, 0xd9}, {&(0x7f0000001700)=""/75, 0x4b}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)) 01:37:48 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc0ffff00000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:37:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="2800000010000000000000000000000008000080040000000c0000800800350000000000"], 0x28}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) [ 2410.683952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=19890 comm=syz-executor.6 [ 2410.687401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=19890 comm=syz-executor.6 [ 2410.745894] FAULT_INJECTION: forcing a failure. [ 2410.745894] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.745965] CPU: 0 PID: 19896 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2410.745982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.745989] Call Trace: [ 2410.746013] dump_stack+0x107/0x167 [ 2410.746040] should_fail.cold+0x5/0xa [ 2410.746063] ? create_object.isra.0+0x3a/0xa20 [ 2410.746086] should_failslab+0x5/0x20 [ 2410.746106] kmem_cache_alloc+0x5b/0x310 [ 2410.746135] create_object.isra.0+0x3a/0xa20 [ 2410.746155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2410.746184] kmem_cache_alloc_bulk+0x168/0x320 [ 2410.746213] io_submit_sqes+0x6f76/0x85c0 [ 2410.746239] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2410.746293] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2410.746312] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2410.746340] ? lock_downgrade+0x6d0/0x6d0 [ 2410.746357] ? find_held_lock+0x2c/0x110 [ 2410.746385] ? io_submit_sqes+0x85c0/0x85c0 [ 2410.746417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2410.746444] ? wait_for_completion_io+0x270/0x270 [ 2410.746469] ? rcu_read_lock_any_held+0x75/0xa0 [ 2410.746486] ? vfs_write+0x354/0xa70 [ 2410.746511] ? fput_many+0x2f/0x1a0 [ 2410.746533] ? ksys_write+0x1a9/0x260 [ 2410.746554] ? __ia32_sys_read+0xb0/0xb0 [ 2410.746580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2410.746599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.746628] do_syscall_64+0x33/0x40 [ 2410.746646] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2410.746660] RIP: 0033:0x7fb499895b19 [ 2410.746680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.746691] RSP: 002b:00007fb496dea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2410.746715] RAX: ffffffffffffffda RBX: 00007fb4999a9020 RCX: 00007fb499895b19 [ 2410.746726] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2410.746738] RBP: 00007fb496dea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.746749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.746761] R13: 00007ffd3a4a1b7f R14: 00007fb496dea300 R15: 0000000000022000 [ 2410.775854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:38:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b66, &(0x7f0000000040)) 01:38:05 executing program 0: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0), 0x8, 0x80800) r2 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) openat(r3, &(0x7f0000000100)='./file0\x00', 0x40904, 0x60) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x40008, 0x0, 0x0, 0x7, 0x0, 0x7, 0x40, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) r4 = openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd=r4, 0x40, &(0x7f0000000340)=""/24, 0x18, 0x0, 0x902487133d3041ce}, 0x3) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0x200f1f0, 0x0) 01:38:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:05 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000001440)={0x0, 0x0, [0x1]}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(r2, 0x1000000005, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d756e69782c64656275673d3078303030303030303130303030303030312c6d6d61702c6d73697a653d3078303030303030303030303030303030342c736d61636b6673726f6f743d5ef972a0742f2c736d61636b66736861743d2c736d61636b66736861743d69736f39363630002c7065726d69745f6474696f2c0000000000"]) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 01:38:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="4f4e551a384e43653519850af57e3f0100362f25d2e96d44d771d75b3d30b2aee1cf089dc6b6c309200af86ea362f9e6f5e0f64af242853915d19124b65d59f863bc8df19daab6c731046f77a02ced75f3a8079d0a306d39dc2046a6528689"], 0x8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x3f, 0x8001, 0xf}}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000004c0)={0xff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x3) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000440)={r0}) 01:38:05 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfe80}, 0x1c) [ 2427.145940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2427.150813] FAULT_INJECTION: forcing a failure. [ 2427.150813] name failslab, interval 1, probability 0, space 0, times 0 [ 2427.153498] CPU: 0 PID: 19918 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2427.155108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2427.157021] Call Trace: [ 2427.157634] dump_stack+0x107/0x167 [ 2427.158490] should_fail.cold+0x5/0xa [ 2427.159374] ? create_object.isra.0+0x3a/0xa20 [ 2427.160432] should_failslab+0x5/0x20 [ 2427.161316] kmem_cache_alloc+0x5b/0x310 [ 2427.162268] ? mark_held_locks+0x9e/0xe0 [ 2427.163178] create_object.isra.0+0x3a/0xa20 [ 2427.164146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2427.165344] kmem_cache_alloc_bulk+0x168/0x320 [ 2427.166383] io_submit_sqes+0x6f76/0x85c0 [ 2427.167307] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2427.168415] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2427.169524] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2427.170653] ? lock_downgrade+0x6d0/0x6d0 [ 2427.171622] ? find_held_lock+0x2c/0x110 [ 2427.172568] ? io_submit_sqes+0x85c0/0x85c0 [ 2427.173579] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2427.174709] ? wait_for_completion_io+0x270/0x270 [ 2427.175829] ? rcu_read_lock_any_held+0x75/0xa0 [ 2427.176899] ? vfs_write+0x354/0xa70 [ 2427.177800] ? fput_many+0x2f/0x1a0 [ 2427.178644] ? ksys_write+0x1a9/0x260 [ 2427.179523] ? __ia32_sys_read+0xb0/0xb0 [ 2427.180471] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2427.181676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2427.182852] do_syscall_64+0x33/0x40 [ 2427.183666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2427.184800] RIP: 0033:0x7fb499895b19 [ 2427.185634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2427.189722] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2427.191422] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2427.192996] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2427.194580] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2427.196159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2427.197734] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2427.209909] EXT4-fs error (device loop3): __ext4_new_inode:1068: comm syz-executor.3: reserved inode found cleared - inode=9 01:38:05 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b67, &(0x7f0000000040)) 01:38:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:21 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) close_range(0xffffffffffffffff, r3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0xffffffff}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4890}, 0x4800) readv(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100029bd7063c1fb573c230000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) lseek(r5, 0xbff, 0x4) unshare(0x48020200) sendfile(r3, r0, &(0x7f0000000000)=0x7fffffff, 0x0) 01:38:21 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfec0}, 0x1c) 01:38:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:21 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0]) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0xfffffffffffffffe}], ['\x00']}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0xfffffffffffffffe}], ['\x00']}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0x2f000, 0x10001}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x3, 0x81, 0x20, 0x0, 0x8, 0x880, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000180), 0xa}, 0x135a0, 0x8000000000000000, 0x30000000, 0x2, 0x40, 0xabbe, 0x6, 0x0, 0xf1e7, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r0, 0xa) 01:38:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b68, &(0x7f0000000040)) 01:38:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000040)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x80000) dup2(r0, r1) [ 2443.409929] FAULT_INJECTION: forcing a failure. [ 2443.409929] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.412697] CPU: 1 PID: 20057 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2443.414315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.416043] Call Trace: [ 2443.416584] dump_stack+0x107/0x167 [ 2443.417333] should_fail.cold+0x5/0xa [ 2443.418125] ? create_object.isra.0+0x3a/0xa20 [ 2443.419053] should_failslab+0x5/0x20 [ 2443.419839] kmem_cache_alloc+0x5b/0x310 [ 2443.420712] ? mark_held_locks+0x9e/0xe0 [ 2443.421724] create_object.isra.0+0x3a/0xa20 [ 2443.422771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.423805] kmem_cache_alloc_bulk+0x168/0x320 [ 2443.424927] io_submit_sqes+0x6f76/0x85c0 [ 2443.425937] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2443.426961] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2443.427971] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2443.428959] ? lock_downgrade+0x6d0/0x6d0 [ 2443.429839] ? find_held_lock+0x2c/0x110 [ 2443.430695] ? io_submit_sqes+0x85c0/0x85c0 [ 2443.431591] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2443.432576] ? wait_for_completion_io+0x270/0x270 [ 2443.433565] ? rcu_read_lock_any_held+0x75/0xa0 [ 2443.434516] ? vfs_write+0x354/0xa70 [ 2443.435283] ? fput_many+0x2f/0x1a0 [ 2443.436028] ? ksys_write+0x1a9/0x260 [ 2443.436815] ? __ia32_sys_read+0xb0/0xb0 [ 2443.437839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.439089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.440339] do_syscall_64+0x33/0x40 [ 2443.441230] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.442399] RIP: 0033:0x7fb499895b19 [ 2443.443323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.447545] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2443.449299] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2443.451015] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2443.452636] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.454349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2443.456102] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:38:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b69, &(0x7f0000000040)) [ 2443.508714] ALSA: seq fatal error: cannot create timer (-22) 01:38:21 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xff00}, 0x1c) 01:38:21 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2443.619333] serio: Serial port tty33 [ 2443.628627] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:38:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b6a, &(0x7f0000000040)) 01:38:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8", 0x9, 0x4000}], 0x0, &(0x7f0000011300)) 01:38:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:22 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = fsmount(r2, 0x0, 0x4) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r3, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) lseek(r3, 0x1f1, 0x0) sendfile(r1, r4, 0x0, 0x100000001) 01:38:22 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xff0f}, 0x1c) 01:38:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) [ 2443.951888] ALSA: seq fatal error: cannot create timer (-22) [ 2443.961631] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2443.968405] FAT-fs (loop5): error, invalid access to FAT (entry 0x000000f8) [ 2443.970066] FAT-fs (loop5): Filesystem has been set read-only [ 2444.010830] EXT4-fs (loop3): inodes count not valid: 65535 vs 32 [ 2444.209874] FAULT_INJECTION: forcing a failure. [ 2444.209874] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.212557] CPU: 1 PID: 20309 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2444.213961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2444.215642] Call Trace: [ 2444.216183] dump_stack+0x107/0x167 [ 2444.216929] should_fail.cold+0x5/0xa [ 2444.217705] ? create_object.isra.0+0x3a/0xa20 [ 2444.218640] should_failslab+0x5/0x20 [ 2444.219412] kmem_cache_alloc+0x5b/0x310 [ 2444.220243] ? mark_held_locks+0x9e/0xe0 [ 2444.221073] create_object.isra.0+0x3a/0xa20 [ 2444.221964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2444.223054] kmem_cache_alloc_bulk+0x168/0x320 [ 2444.223995] io_submit_sqes+0x6f76/0x85c0 [ 2444.224859] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2444.225870] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2444.226897] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2444.227887] ? lock_downgrade+0x6d0/0x6d0 [ 2444.228738] ? find_held_lock+0x2c/0x110 [ 2444.229574] ? io_submit_sqes+0x85c0/0x85c0 [ 2444.230492] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2444.231478] ? wait_for_completion_io+0x270/0x270 [ 2444.232477] ? rcu_read_lock_any_held+0x75/0xa0 [ 2444.233426] ? vfs_write+0x354/0xa70 [ 2444.234217] ? fput_many+0x2f/0x1a0 [ 2444.234958] ? ksys_write+0x1a9/0x260 [ 2444.235748] ? __ia32_sys_read+0xb0/0xb0 [ 2444.236593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2444.237667] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2444.238737] do_syscall_64+0x33/0x40 [ 2444.239507] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2444.240551] RIP: 0033:0x7fb499895b19 [ 2444.241319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2444.245056] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2444.246636] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2444.248081] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2444.249530] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2444.250985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2444.252453] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:38:37 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200002802", 0x5e, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105143, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) 01:38:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b70, &(0x7f0000000040)) 01:38:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:37 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:37 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @random="9590f314af37", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ef0ec9", 0x0, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], "551f0a89df2a2a18"}}}}}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x8}, @val={0x2, 0x1, 0xfff, 0x4, 0xa65f, 0x3e}, @eth={@remote, @local, @val={@val={0x9100, 0x6, 0x1, 0x4}, {0x8100, 0x4, 0x1}}, {@llc_tr={0x11, {@llc={0x8e, 0x0, "cb52", "08a62676b9b4923a97e16e23851343764778dd701ad93f8182ec4bd634b9c17cc34495862b204994eb41ef024236731a3962d8f9366b1a2992a0b6e1c8175e34b32d0fc5a52211e0a9c9ba4f67997bc7ef32733c3b27efa3bc8ca374bd004a51450f672fb5d347774943d470d0b1164bcd8825a8ab0a48e0ad8a9df2d346d132936ca367cc395c8e81"}}}}}}, 0xb1) 01:38:37 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "2b8a9ad0e7eff5d9fbd24fdfe8bf290b0bb64c80278b08ec15cdef2977911643e4162287d3b8b0a324fa03da8fee822b132bd96b88febe02f0326bcae7038ff5", 0x18}, 0x48, r1) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000000000000102030405060708090a090c0d0e0f101112131415161718191a1b1c40031f2021222317ce260728292a002c2d2e2f30312d33cc343537accc393a3b3c3d3e3f402c29cd617419cc0c6bb5611855b829af97da0dca011c117346ab71653e9e4e1a9c29335bb7a5abdefd1ccd3417e9f052a32872b49152616057174966e9a25c8d31cde61e2141d44687e2e00d05e6abf7423eafd9d9fbf190"], 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r2) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r4) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r5) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r5) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r3) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:38:37 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x1000000}, 0x1c) [ 2459.495060] FAULT_INJECTION: forcing a failure. [ 2459.495060] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.498913] CPU: 0 PID: 20324 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2459.500487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2459.502239] Call Trace: [ 2459.502794] dump_stack+0x107/0x167 [ 2459.503564] should_fail.cold+0x5/0xa [ 2459.504366] ? create_object.isra.0+0x3a/0xa20 [ 2459.505321] should_failslab+0x5/0x20 [ 2459.506115] kmem_cache_alloc+0x5b/0x310 [ 2459.506971] ? mark_held_locks+0x9e/0xe0 [ 2459.507823] create_object.isra.0+0x3a/0xa20 [ 2459.508741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2459.509812] kmem_cache_alloc_bulk+0x168/0x320 [ 2459.510788] io_submit_sqes+0x6f76/0x85c0 [ 2459.511658] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2459.512693] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2459.513734] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2459.514764] ? lock_downgrade+0x6d0/0x6d0 [ 2459.515631] ? find_held_lock+0x2c/0x110 [ 2459.516485] ? io_submit_sqes+0x85c0/0x85c0 [ 2459.517402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2459.518421] ? wait_for_completion_io+0x270/0x270 [ 2459.519431] ? rcu_read_lock_any_held+0x75/0xa0 [ 2459.520400] ? vfs_write+0x354/0xa70 [ 2459.521185] ? fput_many+0x2f/0x1a0 [ 2459.521948] ? ksys_write+0x1a9/0x260 [ 2459.522754] ? __ia32_sys_read+0xb0/0xb0 [ 2459.523609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2459.524701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2459.525786] do_syscall_64+0x33/0x40 [ 2459.526575] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2459.527642] RIP: 0033:0x7fb499895b19 [ 2459.528419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.532257] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2459.533845] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2459.535347] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2459.536834] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.538328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.539820] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2459.588122] EXT4-fs (loop3): inodes count not valid: 65535 vs 32 01:38:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b71, &(0x7f0000000040)) 01:38:38 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x67a, 0x2, 0x1}, 0x14bb33c3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4657128f4655f0000f4ffff000020000000100008", 0x22, 0x1c00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0004000000fcff00006d8373070100a5c79d569f002a9f086e5249d5eb4e"]) 01:38:38 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x2000000}, 0x1c) 01:38:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:38 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b72, &(0x7f0000000040)) 01:38:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000001c00)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x4, 0x0, 0x1, 0x81, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20}, 0x3208, 0x8, 0x1f, 0x6, 0x1, 0x8, 0x4, 0x0, 0x8, 0x0, 0xff}, 0xffffffffffffffff, 0x1, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r0, 0x645f, 0x0, 0x0, 0x0, 0x0) [ 2460.020668] FAULT_INJECTION: forcing a failure. [ 2460.020668] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.023361] CPU: 1 PID: 20445 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2460.024786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2460.026519] Call Trace: [ 2460.027064] dump_stack+0x107/0x167 [ 2460.027832] should_fail.cold+0x5/0xa [ 2460.028633] ? create_object.isra.0+0x3a/0xa20 [ 2460.029594] should_failslab+0x5/0x20 [ 2460.030379] kmem_cache_alloc+0x5b/0x310 [ 2460.031204] ? mark_held_locks+0x9e/0xe0 [ 2460.032029] create_object.isra.0+0x3a/0xa20 [ 2460.032917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2460.033960] kmem_cache_alloc_bulk+0x168/0x320 [ 2460.034899] io_submit_sqes+0x6f76/0x85c0 [ 2460.035752] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2460.036761] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2460.037772] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2460.038779] ? lock_downgrade+0x6d0/0x6d0 [ 2460.039618] ? find_held_lock+0x2c/0x110 [ 2460.040450] ? io_submit_sqes+0x85c0/0x85c0 [ 2460.041336] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2460.042491] ? wait_for_completion_io+0x270/0x270 [ 2460.043475] ? rcu_read_lock_any_held+0x75/0xa0 [ 2460.044631] ? vfs_write+0x354/0xa70 [ 2460.045551] ? fput_many+0x2f/0x1a0 [ 2460.046313] ? ksys_write+0x1a9/0x260 [ 2460.047090] ? __ia32_sys_read+0xb0/0xb0 [ 2460.047924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2460.048985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2460.050045] do_syscall_64+0x33/0x40 [ 2460.050902] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2460.052181] RIP: 0033:0x7fb499895b19 [ 2460.052941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.057300] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2460.059031] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2460.060625] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2460.062337] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.063957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.065539] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:38:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x5d5440, 0x21) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r2, 0x100, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unshare(0x48020200) [ 2460.143092] EXT4-fs (loop3): inodes count not valid: 65535 vs 32 [ 2460.211551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 01:38:54 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x3000000}, 0x1c) 01:38:54 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c63}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1000, 0x2000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfc, 0x6, 0x1, 0x9, 0x0, 0xa18, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f00000000c0), 0x14}, 0x75000, 0xaff, 0xfff, 0x2, 0x3, 0x101, 0x1f, 0x0, 0x8, 0x0, 0xaa7a}, 0xffffffffffffffff, 0xa, r0, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 01:38:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:54 executing program 6: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000010c0)=""/105) msgctl$IPC_RMID(r0, 0x0) msgrcv(0x0, &(0x7f00000002c0)=ANY=[], 0x61, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xab, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x80, 0x7f, 0x2, 0x0, 0x7fff, 0x80000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x2, @perf_config_ext={0x5}, 0x4, 0xfffffffffffffffc, 0x5, 0x3, 0x8, 0x9, 0x2, 0x0, 0x1, 0x0, 0x62596a9a}, r1, 0xe, r2, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000002800)={0x0, 0x27, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r4, 0x1, 0x1, 0x0, {0x7}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xfffffffffffffeac}}, 0x0) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r7) 01:38:54 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0x3, 0x8, 0x7}) r4 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000540)=0x0) sendfile(r1, r0, &(0x7f0000000000)=0xffffffff80000001, 0x3f) signalfd(r0, &(0x7f0000000140)={[0xffff]}, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x5c33, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0x0) 01:38:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4bfa, &(0x7f0000000040)) [ 2476.658038] FAULT_INJECTION: forcing a failure. [ 2476.658038] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.661376] CPU: 0 PID: 20588 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2476.662853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.664564] Call Trace: [ 2476.665110] dump_stack+0x107/0x167 [ 2476.665872] should_fail.cold+0x5/0xa [ 2476.666736] ? create_object.isra.0+0x3a/0xa20 [ 2476.667722] should_failslab+0x5/0x20 [ 2476.668523] kmem_cache_alloc+0x5b/0x310 [ 2476.669348] ? mark_held_locks+0x9e/0xe0 [ 2476.670198] create_object.isra.0+0x3a/0xa20 [ 2476.671159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.672226] kmem_cache_alloc_bulk+0x168/0x320 [ 2476.673161] io_submit_sqes+0x6f76/0x85c0 [ 2476.673433] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2476.674037] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2476.674090] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2476.675319] EXT4-fs (loop3): group descriptors corrupted! [ 2476.676577] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2476.676615] ? lock_downgrade+0x6d0/0x6d0 [ 2476.680758] ? find_held_lock+0x2c/0x110 [ 2476.681769] ? io_submit_sqes+0x85c0/0x85c0 [ 2476.682852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2476.684038] ? wait_for_completion_io+0x270/0x270 [ 2476.685221] ? rcu_read_lock_any_held+0x75/0xa0 [ 2476.686357] ? vfs_write+0x354/0xa70 [ 2476.687343] ? fput_many+0x2f/0x1a0 [ 2476.688241] ? ksys_write+0x1a9/0x260 [ 2476.689172] ? __ia32_sys_read+0xb0/0xb0 [ 2476.690176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2476.691465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.692548] do_syscall_64+0x33/0x40 [ 2476.693297] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2476.694343] RIP: 0033:0x7fb499895b19 [ 2476.695107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.698907] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2476.700466] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2476.701933] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2476.703403] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.704861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2476.706325] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:38:55 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8531000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4bfb, &(0x7f0000000040)) 01:38:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x0, 0x0, 0x1}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000001040300000000000008000000"], 0x1c}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) 01:38:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:38:55 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4000000}, 0x1c) 01:38:55 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100682, 0x9) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9, 0x2, 0x81, 0x6}, {0x80, 0xff, 0x3f, 0x3}]}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x10b, 0x5, 0xd7, 0xdb, 0x199, 0x1, 0x271, 0xfffffffb}, "1bfc7bc10dafaf2f053b949b337949aa52e24454a2da767ce2cfdaea07b7f540d304643f5d9fb3ded01f91411300dcb93b11c66aad925efeb64268adc4689ce7008c8c4317ede0759389e43047b84ce53f52f962a1c0253eaeda0a69bd1c37d6053cd52867ab965c082e41af97e79de851afeb11d4ddde3e32b482339db4bac8323f7d07f08c35a4bfa4eddf0e75ca5bda6049dc7dafe55c93976226f9f46b63e3d215fdf24a1c32f964d058d3a1c4f2db29b5b6a865", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad6) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) lseek(r0, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) lseek(r3, 0x2, 0x1) r4 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) 01:38:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:38:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fork() syz_open_procfs(r1, &(0x7f00000001c0)='numa_maps\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffd49, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0x0, 0xfc}}, 0x14}}, 0x0) r2 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1f}}, './file0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file1\x00'}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001e00)={0x1aa4, 0x7f, 0x2, 0x70bd28, 0x25dfdbfd, {0xb}, [@generic="4f80aab75d23fa53a3c851c8ef0eaab5716a02286785ae40c998ac538da7b4b5671e86628439c1ec0559469a8d0f7bcc10fde216c7cdc8d5c32b4c4e7e61f8ab0b6afacdee3b6814397c959def8a253f291a4dcb53ecf39b74ca24d725a542b82ffab227088835136d41e6ec02aa8d3c5970df76557c672c24367c2c06e79e47d19cf99805eb72d68d13ebd1107236e04da7b823ee46440a19efdabc1ac2b2307f367d26172c73c39cedc6876533d8707947441e7da8085d1f665aa55cfa72aa8f4e7db559fd93d575417ec0ad8dc5ea2121402bfe934346cb50996ec6a5d34b", @nested={0x1cc, 0x1b, 0x0, 0x1, [@typed={0xab, 0x42, 0x0, 0x0, @binary="1282ccd4675f3b0800bb73f431c9133b8e7705b3c3e2e8196e043b47df51958471a2278849ca0e1fdcb2e98dff7c89aec99f9f10c5cf4fa19b4e2d297ba328b6b4baa0e4771a392574dfc8bc1d5b073bbcfedc50e45afda6e7a06c78b3450adffdcccd1af22c1e4571df5c521c717b28932a02b756019fb9df16d6304040b5fc045e805f68381a3a5b2b272c037ecb9e2397f88ff76e10176e10eef3d3b17841a1b7c05124ed81"}, @generic="0158bf47187ef659781d1e59d81c80c9439a5a9d6bde7e68473864f74e09476dc1332cb5d57472527b6c9afa9718d9ae296e73fb41e4aa91783ff65a7e9e36fbeec6ff0809a3a73557d2365d0e9f0199d75f677c16f29ebae01aa56af5da72a282dca1900ddcf2ea8f8c5cd58f36d476e156a68f6725536889e754b349d2254df4be4c44796929b912e356a7b1c394e0cff48bac06121e0fcf7a5ba58d47af02049d4b0ec7b0985816886b79498ea7d3f0d6a9fa7528a6ad9e4612b43181bbf95dfc6802f71f70e244", @generic="1b95cdbd1e99e2ae416bcc4f02552d6193cc3e4ec7a23936c54b85b8aed3a84ad6f83829e695926bec6cbcbb43bc8f7866bcfa5dcd7f667c0acbfacdba8b70ffcd867c9017cdacac3ab3f2c07e4f43c39b914b"]}, @generic="7e4cc04f343b0e848a62b84c3888a81c0298a8cea7738299dee976a8c2745f6d1771be7c4a5068915fecdeb311b5464c14bc971013edf80f3e1e3717fd7694efda8f8b80677fd9426653bae6a1594a996afb584435e856473ac523f497b0a4233c9b95e64994e17833f4468d1fbde087c034795280a9fc7afdcf1cad74fa50627927adfa2a951fc79c628380abb0cedb9c18f7931f8827ec3dbf71e62b6520ff28eb8995b7b416ef78610d8ee26d0b2a80693af064d1c03da8944946cd63814d51309c9ea3f17c8ebd47e2767d57f4d7a9c39f", @nested={0x110, 0x21, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x69, 0x0, 0x0, @uid=r6}, @generic="1ceb956b22f35fe8577dbd52ce7c36499d3afee33e1d0778aa67043081b49901fc90dd265def5d50209c5eef52d27bccd70660c9bf6f832d27a0fccdc454f88c36ba0107992b292f80af51efc7f94a3da3bd14bda1e5aedc609a7f212ddabdbd62efff03956c0086924e07f303496b8c6383e81aa691d9d890d24052cc4180906f21238f04442186ea22664c13db5acbcc953b398f501e891a6afe4b3169b0412f970200eb2f68b44225baed392b8d022a866150c534e8e7c6a6dbb712d7778075e4811005fc9d8e9d8c68663a14446d9995cba636ed356366b6b89e", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x206, 0x61, 0x0, 0x1, [@typed={0x14, 0x41, 0x0, 0x0, @ipv6=@remote}, @generic="1cc5b7d343d958192ec4c2849676b278e613aba1dcaeb2291b855eb59b5e5910fb47c48715595e77e816abc4c5e7c424d6d264634e3874c89f3f592cb2c6dd1e8c444e84874c5c5ee20d39fc17e2e7b87bb80c802195a136ebcb71cf127fdad6d73b7b59acd6c719abea6083", @generic="f1b83cdc12cf228223709da3c37fd6922114a266e2376e13587018de010a8db43903af7654562001aced3000e23c9a4eaabe44632b9e1f4778d4df3c3ab63042df5035b21339f64c94edf6ace26872cdf3583346b98cc6d49479b9b1ab1b5e7ba5059117a4a950ad6e0d3e7892631550c843c22dc3be196388e790c3a011b748e655e989f875c9e06dd01cfe7886bd7b92abbc456f3d795b88ca", @generic="7a6d8aa985a1e53aa9edfd01cba5012c4a5652c848ee7fae1b33e855ba19d542da770255c7ab74529fe53f8b9972c1693404a2f4ed3ce0a01d42dd63f4c1cb66949ee5659ff780a7c26dda8d3afef9cf6739d646a1d336c9d3f012d77f89056fb2519de14f81a37f892d8b601ba87b3da9f584f742d8d83a0221f5fef047a3048c3f45164e3c4362b0fcc20be5a6d3df08a3b9de68845ec7431e194bea91ee149fdd7ffc871edee34cccf9053536ce3b3e4b9c4366e383ba063c3fb721507994fd0e04a6cce905860b59085424e8dbd53b20a29c", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x2c, 0x2c, 0x0, 0x1, [@generic="c6a1fce6b09a980e44e6aef56e6ffba25fc94bf1637a716221264f51d2093f8b4de4806a2838232d"]}, @typed={0x8b, 0x20, 0x0, 0x0, @binary="2cafa5374dc2be4f3391c2518c29c9f2c306d881f468b6e488d6f20c6cd4aac86bd49e88ca4fdfd57d12de0c65d30b022b57cac3811a870952fc828f461ab1bc5a4c75127786192e5dde3fa1ce0c6198291309b9d8e7a57377c66c41256d1a5bcaa63c267277e9943d497356ca695ed15a9cc0caae0c5aa4191ea2eac1ef5b35967505805de455"}, @nested={0x1159, 0x2b, 0x0, 0x1, [@typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@mcast1}, @generic="60af54c514f96a8f30184932cc3df41eb1786d03e9e563f059a64ba1440a9ef26919383abc104e1a9d24b3b589cc4b576757f30651def6e3dc37e54dab473a3242e3641cdd0bd2963e4a97c02aeee8fbe4cb8bbbeba6ac5f256fb950c7d79e4d510f7fe7f79ee22349874a59736351b04ba5dff732d408d50f1fdb4cff4e4ad4d58701864f78c9e766", @generic="44dc0226d8a97b4ae65979ef7c90a3119174b17e1c53ae5428cce698e2faabd9fa904560dbd34732201919d06229449e65a99f18733ee6382fa146c8620798aa47596950dadd5608b007f4afcffec8db448338899a94a312ed0a239836fd08cc3ed8706fbcd48f1ccb1352315c03d8dc8102b94474004d6bd3635d55cf7f2d577df873d28851f7f8c9a138b0a67e548c947c39b72a971e41e2f2891ccec22aaa698729b73e54aa264e5bedce16244292", @generic="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", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}]}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x1ce, 0x43, 0x0, 0x1, [@generic="1b7ae5cfc66de5c50f0634da027dc94a0f6f304423bb76d3faf9babf18eb66a60ab898469b20", @generic="5dc347fd4fa9f5cfbfc9501701e1c9eac1fd7712035ac2d68e2e48ea0e81ca9f85e9e49a0189c0bde8966a1ca942b12b0a45f2", @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="277cc28baf953ed8d084a648d4c346d977b353c4c6da3374dd5c7d8983561dbc4fd15baeec44ac89e871ad201f12fa1fb983a78b644c867531e6fcee5f5bafcc35b9bc16d688a8ce20f9a9740bdb3d9b6eec86bdca4b98bc435b87f488c4c0f033c7d763cfe56de75564c6039cb48f2468014ef7f4cd2df535030323839e5a90d50f64aa3a9b4101b5d067933d425be5de60deb11614caec1dd1dfcae3742312006e3527703185467c5a3128e3", @typed={0x8, 0x3d, 0x0, 0x0, @uid=r7}, @generic="ea44fc589695df7525b0c99e9ecae1f5902b1c00f8f91f8e35dc3641a3", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x2}, @generic="fdeb009148b4e07374add87c2283970f46c5ceb2ab9c729d8abd9eca4da303074dbb652c835eb1a3753bcad625df953820257d9d0b53930789f79e0113f167c6916dd77609389dbe262a2fdbdbc81884dc19c263680c1ecde687a2115ae232a15f252ea46d4839b8b7782e71052a9985946ccf8f0db875261a200c57caa6d4"]}]}, 0x1aa4}, 0x1, 0x0, 0x0, 0x8080}, 0x800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xda}, 0xe) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 01:38:55 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc00c000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:38:55 executing program 0: unshare(0x2a040600) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@empty}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) getpgrp(r0) unshare(0x10000) unshare(0x4000300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x3, 0x1, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7880, 0x40, 0x4, 0x7f}}) unshare(0x200) [ 2477.080590] FAULT_INJECTION: forcing a failure. [ 2477.080590] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.083128] CPU: 0 PID: 20744 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2477.084550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.086362] Call Trace: [ 2477.086946] dump_stack+0x107/0x167 [ 2477.087721] should_fail.cold+0x5/0xa [ 2477.088521] ? create_object.isra.0+0x3a/0xa20 [ 2477.089479] should_failslab+0x5/0x20 [ 2477.090270] kmem_cache_alloc+0x5b/0x310 [ 2477.091137] ? mark_held_locks+0x9e/0xe0 [ 2477.091986] create_object.isra.0+0x3a/0xa20 [ 2477.092908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2477.093976] kmem_cache_alloc_bulk+0x168/0x320 [ 2477.094945] io_submit_sqes+0x6f76/0x85c0 [ 2477.095820] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2477.096839] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.097877] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2477.098897] ? lock_downgrade+0x6d0/0x6d0 [ 2477.099757] ? find_held_lock+0x2c/0x110 [ 2477.100608] ? io_submit_sqes+0x85c0/0x85c0 [ 2477.101524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2477.102528] ? wait_for_completion_io+0x270/0x270 [ 2477.103543] ? rcu_read_lock_any_held+0x75/0xa0 [ 2477.104509] ? vfs_write+0x354/0xa70 [ 2477.105292] ? fput_many+0x2f/0x1a0 [ 2477.106055] ? ksys_write+0x1a9/0x260 [ 2477.106870] ? __ia32_sys_read+0xb0/0xb0 [ 2477.107726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2477.108824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2477.109914] do_syscall_64+0x33/0x40 [ 2477.110714] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2477.111786] RIP: 0033:0x7fb499895b19 [ 2477.112566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.116403] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2477.117993] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2477.119462] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2477.120915] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.122379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2477.123864] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2477.131629] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2477.132773] EXT4-fs (loop3): group descriptors corrupted! 01:39:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5409, &(0x7f0000000040)) 01:39:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:39:11 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:39:11 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5000000}, 0x1c) 01:39:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x442, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xa}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) getresuid(&(0x7f00000015c0), &(0x7f0000001800), &(0x7f0000001840)=0x0) stat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@cache_mmap}], [{@uid_eq={'uid', 0x3d, r4}}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x20) unshare(0x48020200) socket$nl_generic(0x10, 0x3, 0x10) 01:39:11 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x46842, 0x0) io_setup(0x5, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfc, 0x94, 0x81, 0xcb, 0x0, 0x2, 0x88, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x100, 0x1, 0xf654, 0x5, 0xffffffffffffffd5, 0x3ff, 0x401, 0x0, 0x6, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) syz_io_uring_setup(0x3de4, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x2, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x8b0}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x882c2, 0x0) fsync(r5) creat(&(0x7f0000000140)='./file0\x00', 0x8) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000ff7f00000500000000000000ffff00000000000008000000000000000104000000000000000000000000000000000000000000000000000000000000090000008100000000000000feff0000001000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003019b2561b2a35100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc81000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023738cfb00000000000000000000000000000000000000000000000000c1f300"/516]) 01:39:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/918], 0x396) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x10001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) sendfile(r2, r5, 0x0, 0x9) 01:39:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x540b, &(0x7f0000000040)) [ 2493.577099] FAULT_INJECTION: forcing a failure. [ 2493.577099] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.579467] CPU: 1 PID: 20862 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2493.580868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.582539] Call Trace: [ 2493.583097] dump_stack+0x107/0x167 [ 2493.583864] should_fail.cold+0x5/0xa [ 2493.584652] ? __io_queue_sqe+0x666/0x9d0 [ 2493.585515] should_failslab+0x5/0x20 [ 2493.586292] kmem_cache_alloc_trace+0x55/0x320 [ 2493.587241] __io_queue_sqe+0x666/0x9d0 [ 2493.588056] ? io_issue_sqe+0x7700/0x7700 [ 2493.588901] ? io_prep_rw+0x7f5/0x1050 [ 2493.589698] io_submit_sqes+0x4461/0x85c0 [ 2493.590577] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2493.591667] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2493.592655] ? lock_downgrade+0x6d0/0x6d0 [ 2493.593516] ? find_held_lock+0x2c/0x110 [ 2493.594344] ? io_submit_sqes+0x85c0/0x85c0 [ 2493.595233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2493.596207] ? wait_for_completion_io+0x270/0x270 [ 2493.597175] ? rcu_read_lock_any_held+0x75/0xa0 [ 2493.598109] ? vfs_write+0x354/0xa70 [ 2493.598882] ? fput_many+0x2f/0x1a0 [ 2493.599625] ? ksys_write+0x1a9/0x260 [ 2493.600390] ? __ia32_sys_read+0xb0/0xb0 [ 2493.601213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2493.602271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2493.603345] do_syscall_64+0x33/0x40 [ 2493.604098] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2493.605173] RIP: 0033:0x7fb499895b19 [ 2493.605932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.609804] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2493.611365] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2493.612799] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2493.614229] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2493.615678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2493.617336] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2493.621199] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2493.623302] EXT4-fs (loop3): group descriptors corrupted! [ 2493.702771] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 01:39:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:39:12 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x6000000}, 0x1c) 01:39:12 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xf002000000000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) [ 2493.884930] FAULT_INJECTION: forcing a failure. [ 2493.884930] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.887838] CPU: 0 PID: 20980 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2493.889287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.891005] Call Trace: [ 2493.891550] dump_stack+0x107/0x167 [ 2493.892317] should_fail.cold+0x5/0xa [ 2493.893132] ? create_object.isra.0+0x3a/0xa20 [ 2493.894093] should_failslab+0x5/0x20 [ 2493.894889] kmem_cache_alloc+0x5b/0x310 [ 2493.895736] create_object.isra.0+0x3a/0xa20 [ 2493.896644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2493.897692] kmem_cache_alloc_trace+0x151/0x320 [ 2493.898670] __io_queue_sqe+0x666/0x9d0 [ 2493.899496] ? io_issue_sqe+0x7700/0x7700 [ 2493.900359] ? io_prep_rw+0x7f5/0x1050 [ 2493.901171] io_submit_sqes+0x4461/0x85c0 [ 2493.902083] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2493.903135] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2493.904138] ? lock_downgrade+0x6d0/0x6d0 [ 2493.904985] ? find_held_lock+0x2c/0x110 [ 2493.905827] ? io_submit_sqes+0x85c0/0x85c0 [ 2493.906756] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2493.907757] ? wait_for_completion_io+0x270/0x270 [ 2493.908751] ? rcu_read_lock_any_held+0x75/0xa0 [ 2493.909711] ? vfs_write+0x354/0xa70 [ 2493.910490] ? fput_many+0x2f/0x1a0 [ 2493.911261] ? ksys_write+0x1a9/0x260 [ 2493.912043] ? __ia32_sys_read+0xb0/0xb0 [ 2493.912882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2493.913959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2493.915037] do_syscall_64+0x33/0x40 [ 2493.915803] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2493.916856] RIP: 0033:0x7fb499895b19 [ 2493.917622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.921420] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2493.922999] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2493.924466] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2493.925930] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2493.927410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2493.928872] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:39:12 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "d5b7902624b023ae88d1feffa80c46beb8d4d73ab7e7a822c702cbf2ce413dad5bbe0f04f3652e2eeb58025591beb86d20fd34f04253862c095d5a55307c3f2f", 0x3b}, 0x48, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x5, 0x3}, {0xdc84, 0x6}, {0x2, 0x926}, {0x800, 0x7}, {0x8, 0x4}]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f00000003c0)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) unshare(0x20000000) add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0xfec5, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000440)='\x00') 01:39:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x540c, &(0x7f0000000040)) [ 2494.035919] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 [ 2494.045351] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2494.047298] EXT4-fs (loop3): group descriptors corrupted! 01:39:12 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:28 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x7000000}, 0x1c) 01:39:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x540d, &(0x7f0000000040)) 01:39:28 executing program 0: socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a912"]) 01:39:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:39:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:39:28 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:28 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup(r0) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}}, 0x10000009) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f00000000c0), 0x100000001, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="e0010000", @ANYRES16, @ANYRES16, @ANYRES32=r3, @ANYRESDEC], 0x1e0}, 0x1, 0x0, 0x0, 0x4090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60002}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x21c, 0x0, 0x804, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0xe72, 0xffffffff7fffffff) 01:39:28 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="eb58906d6b66732e66617400028020000402000004f8000020004000030000000000000001000000000000000200", 0x2e}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="756e695f3808000081"]) statx(r0, &(0x7f0000000280)='./file0\x00', 0x100, 0x800, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r2, @ANYBLOB=',\x00']) r3 = getuid() mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x212c20, &(0x7f0000001580)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '@/'}}, {@access_client}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@privport}, {@access_uid={'access', 0x3d, r3}}, {@version_9p2000}, {@cachetag={'cachetag', 0x3d, '!.+\\-}[*'}}, {@privport}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x37, 0x32, 0x35, 0x37, 0x62, 0x30, 0x34], 0x2d, [0x39, 0x30, 0x64, 0x65], 0x2d, [0x39, 0x36, 0x36, 0x32], 0x2d, [0x36, 0x64, 0x30, 0x56], 0x2d, [0x64, 0x37, 0x31, 0x65, 0x61, 0xb, 0x35, 0x36]}}}]}}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001500)) chroot(&(0x7f0000001680)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x1000, 0x2}], 0x20000, &(0x7f0000001440)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,shortname=winnt,shortname=mixed,shortname=winnt,uni_xlate=1,rodir,shortname=lower,rodir,smackfsfloor=vfat\x00,mask=MAY_READ,uid>', @ANYRESDEC=r1, @ANYBLOB="328e"]) [ 2509.683895] FAULT_INJECTION: forcing a failure. [ 2509.683895] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.686016] CPU: 1 PID: 21120 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2509.687054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2509.688125] Call Trace: [ 2509.688470] dump_stack+0x107/0x167 [ 2509.688956] should_fail.cold+0x5/0xa [ 2509.689458] ? __io_queue_proc+0x262/0x5a0 [ 2509.690015] should_failslab+0x5/0x20 [ 2509.690504] kmem_cache_alloc_trace+0x55/0x320 [ 2509.691117] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2509.691781] __io_queue_proc+0x262/0x5a0 [ 2509.692304] ? io_poll_queue_proc+0x50/0x50 [ 2509.692867] n_tty_poll+0xba/0x8f0 [ 2509.693344] ? n_tty_ioctl+0x370/0x370 [ 2509.693868] tty_poll+0x144/0x1c0 [ 2509.694359] ? tty_release+0xe90/0xe90 [ 2509.695013] __io_arm_poll_handler+0x399/0x9e0 [ 2509.695567] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2509.695640] __io_queue_sqe+0x52b/0x9d0 [ 2509.697678] EXT4-fs (loop3): group descriptors corrupted! [ 2509.698109] ? io_issue_sqe+0x7700/0x7700 [ 2509.699796] ? io_poll_queue_proc+0x50/0x50 [ 2509.700369] ? io_prep_rw+0x7f5/0x1050 [ 2509.700895] io_submit_sqes+0x4461/0x85c0 [ 2509.701460] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2509.702110] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2509.702755] ? lock_downgrade+0x6d0/0x6d0 [ 2509.703308] ? find_held_lock+0x2c/0x110 [ 2509.703852] ? io_submit_sqes+0x85c0/0x85c0 [ 2509.704430] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2509.705063] ? wait_for_completion_io+0x270/0x270 [ 2509.705704] ? rcu_read_lock_any_held+0x75/0xa0 [ 2509.706315] ? vfs_write+0x354/0xa70 [ 2509.706823] ? fput_many+0x2f/0x1a0 [ 2509.707301] ? ksys_write+0x1a9/0x260 [ 2509.707802] ? __ia32_sys_read+0xb0/0xb0 [ 2509.708342] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2509.709039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2509.709725] do_syscall_64+0x33/0x40 [ 2509.710223] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2509.710915] RIP: 0033:0x7fb499895b19 [ 2509.711409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2509.713837] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2509.714856] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2509.715796] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2509.716741] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2509.717675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2509.718608] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:39:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x540e, &(0x7f0000000040)) [ 2509.743673] FAT-fs (loop5): Unrecognized mount option "uni_8" or missing value [ 2509.757695] cgroup: Unknown subsys name 'releaseWagent' 01:39:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x7}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000340)="2102c1dd3385cee4cf8055ab61e41f49047066b59e1549fa3701d20ee24dee7a568f202f0e0f250c958f0301f5a0d4a329132f0f3fdc5f76a9b886e9e1471e6d7a1b583fa96b93a7e6fcf2c31ac6492f0d74baa804d56fa1f317cf1f559a828f904e651e53621f67a57cca534dbf2f1c5298f48de38e0db59bdddcdb8d6694cec03b3b37ba2c630646300f1fadd2ab1fd48a68d832693ea471eeb0", 0x9b}, {&(0x7f0000000240)="2dc8af0dc5eea6d874046d32d12558ee9b49b8c96f6be98f3ffd2e1c73a1bfbec7fc544c19aaa7df4dcc843f19bece63b8be39ef56021bd6334973", 0x3b}, {&(0x7f0000000280)="d53d552cd0ba1499a48617", 0xb}, {&(0x7f0000000400)="0aae3d10504bdf64352912d94669ea9990006c0ca60361bf21dfa82dd556014a92fe0bd9c2c0c323497561da4a214528edc0d17b0162eb0d193359ff64bbf78f9790aef0023ba22f1ade2de5c7e2fc829505779c4af26b7b4315ef5249b4cc0a6ced8e38b0fa4a77981aa017ee6ad137345c988c36428f7a7fcbafae98d7681f37b2c37ef35998ba57f747e778f8854a00ff0c0c0883fc20c14b88d557a0102c3dea077dd82a6b9d097665de89b81f279acd3e997ecd5305610c7ce682135652afd088ba1ffa6eccad2a3c4aed0af0256b16dbc8817c9df36aa30cd4eccfd585efbf61f4bf3bdb3f37e485373f", 0xed}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000500)="f0ab9f84f240d2e975e5455b86fc63ecb529a992009fe337c379576f2c95b9ba36e14b6fe4bc4417902bd448792ce72c2327ba690cf00675f6436ce0839476829e48a4f1c707cb6545e10af31d5ec4dfe423d7f778078a6c2e864b6068d62b237f6eb07407c28c1459def42e231693dce246a77cebc000ebc89d4938dbbe85a868b4cc362211ef4098ea26eaa5fbaf94e7a8c0df5678a3fd", 0x98}, {&(0x7f00000016c0)="c5bc2819d0b9e31868de4e981b0b1631ba90e4d5d4fabd4c194c16d213797fb8310f024610d5853833d9d23dd902861d6257bb3455d7fc3ecc7110428183a54be83acaaec1c6314936c7943d4b43fe3d0e16522c185ce37b2cfb6fa0a9247e997aa52f651d18b22d032e0a477a77970d25740f1a87692c698d2c3172218c7bfb65c35b7186c4512c41cdddd2c552b8392a4268bcdf1eb928144d39e65b58eec47d66fe17ca5f2cad99c1d81a3b394f4fdbdb04168bffd1476e01a3fcbd63064011", 0xc1}], 0x7}}], 0x1, 0x4004) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r2 = dup(r1) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) syz_io_uring_setup(0x3167, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffbffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_pts(r2, 0x800) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) dup2(r7, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x40, 0x4, 0x7b, 0x0, 0x1, 0x6}) pipe2(0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r4, r3, r1], 0x3}, 0x81) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x18c, 0x0, 0x0, 0x0, 0x76004}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 01:39:28 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:28 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8000000}, 0x1c) 01:39:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:39:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) [ 2510.077331] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2510.079525] EXT4-fs (loop3): group descriptors corrupted! [ 2510.104771] FAULT_INJECTION: forcing a failure. [ 2510.104771] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.106056] CPU: 1 PID: 21258 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2510.106777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.107675] Call Trace: [ 2510.107959] dump_stack+0x107/0x167 [ 2510.108346] should_fail.cold+0x5/0xa [ 2510.108752] ? create_object.isra.0+0x3a/0xa20 [ 2510.109245] should_failslab+0x5/0x20 [ 2510.109651] kmem_cache_alloc+0x5b/0x310 [ 2510.110102] create_object.isra.0+0x3a/0xa20 [ 2510.110572] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2510.111130] kmem_cache_alloc_trace+0x151/0x320 [ 2510.111637] __io_queue_proc+0x262/0x5a0 [ 2510.112078] ? io_poll_queue_proc+0x50/0x50 [ 2510.112547] n_tty_poll+0xba/0x8f0 [ 2510.112923] ? n_tty_ioctl+0x370/0x370 [ 2510.113340] tty_poll+0x144/0x1c0 [ 2510.113716] ? tty_release+0xe90/0xe90 [ 2510.114129] __io_arm_poll_handler+0x399/0x9e0 [ 2510.114625] __io_queue_sqe+0x52b/0x9d0 [ 2510.115074] ? io_issue_sqe+0x7700/0x7700 [ 2510.115511] ? io_poll_queue_proc+0x50/0x50 [ 2510.115975] ? io_prep_rw+0x7f5/0x1050 [ 2510.116394] io_submit_sqes+0x4461/0x85c0 [ 2510.116868] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2510.117394] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2510.117911] ? lock_downgrade+0x6d0/0x6d0 [ 2510.118349] ? find_held_lock+0x2c/0x110 [ 2510.118799] ? io_submit_sqes+0x85c0/0x85c0 [ 2510.119274] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2510.119794] ? wait_for_completion_io+0x270/0x270 [ 2510.120310] ? rcu_read_lock_any_held+0x75/0xa0 [ 2510.120808] ? vfs_write+0x354/0xa70 [ 2510.121213] ? fput_many+0x2f/0x1a0 [ 2510.121603] ? ksys_write+0x1a9/0x260 [ 2510.122007] ? __ia32_sys_read+0xb0/0xb0 [ 2510.122445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.123008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.123564] do_syscall_64+0x33/0x40 [ 2510.123958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2510.124503] RIP: 0033:0x7fb499895b19 [ 2510.124905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.126863] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2510.127676] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2510.128443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2510.129199] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.129956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2510.130710] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:39:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:39:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x1) 01:39:44 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:44 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xe000000}, 0x1c) 01:39:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x540f, &(0x7f0000000040)) 01:39:44 executing program 6: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x104, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x61f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ab}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe4}]}, 0x104}, 0x1, 0x0, 0x0, 0x10000041}, 0x20000804) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r8 = open_tree(r7, &(0x7f0000000240)='./file0\x00', 0x801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000340)) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x4, 0x8, 0x3, 0x0, 0x8001, 0x200, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1800000}, 0x2, 0x5fab, 0xffffffc1, 0x6, 0x20, 0x2, 0x4, 0x0, 0x80000000, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x5) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r10, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x1, 0x6, 0x0, 0x40, 0x1}, 0x1) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:39:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:39:44 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0x1000, 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6096153f00303a00fe880000000000000000000000000001ff02000000000000000000000000000103009078000000006047e5ac00fe0000ff010000000000000000000000000001fe880000000000d8358a52d8b4150993"], 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) r7 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r11, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r12, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r12, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x300, 0x12345}, 0xffffffe0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r13 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1, 0xb, 0x0, {0x0, 0x0, r13}}, 0x6) [ 2526.507843] FAULT_INJECTION: forcing a failure. [ 2526.507843] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.510941] CPU: 1 PID: 21273 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2526.512490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.514348] Call Trace: [ 2526.514936] dump_stack+0x107/0x167 [ 2526.515792] should_fail.cold+0x5/0xa [ 2526.516745] ? __io_queue_proc+0x262/0x5a0 [ 2526.517819] should_failslab+0x5/0x20 [ 2526.518680] kmem_cache_alloc_trace+0x55/0x320 [ 2526.519764] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2526.520913] __io_queue_proc+0x262/0x5a0 [ 2526.521832] ? io_poll_queue_proc+0x50/0x50 [ 2526.522808] n_tty_poll+0xba/0x8f0 [ 2526.523618] ? n_tty_ioctl+0x370/0x370 [ 2526.524500] tty_poll+0x144/0x1c0 [ 2526.525325] ? tty_release+0xe90/0xe90 [ 2526.526284] __io_arm_poll_handler+0x399/0x9e0 [ 2526.527393] __io_queue_sqe+0x52b/0x9d0 [ 2526.528402] ? io_issue_sqe+0x7700/0x7700 [ 2526.529321] ? io_poll_queue_proc+0x50/0x50 [ 2526.530279] ? io_prep_rw+0x7f5/0x1050 [ 2526.531180] io_submit_sqes+0x4461/0x85c0 [ 2526.532110] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2526.533211] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2526.534274] ? lock_downgrade+0x6d0/0x6d0 [ 2526.535207] ? find_held_lock+0x2c/0x110 [ 2526.536122] ? io_submit_sqes+0x85c0/0x85c0 [ 2526.537095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2526.538170] ? wait_for_completion_io+0x270/0x270 [ 2526.539255] ? rcu_read_lock_any_held+0x75/0xa0 [ 2526.540267] ? vfs_write+0x354/0xa70 [ 2526.541103] ? fput_many+0x2f/0x1a0 [ 2526.541898] ? ksys_write+0x1a9/0x260 [ 2526.542751] ? __ia32_sys_read+0xb0/0xb0 [ 2526.543669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.544837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.545974] do_syscall_64+0x33/0x40 [ 2526.546808] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2526.547931] RIP: 0033:0x7fb499895b19 [ 2526.548763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.552824] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2526.554542] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2526.556165] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2526.557814] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2526.559443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2526.561008] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2526.617245] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2526.619488] EXT4-fs (loop3): group descriptors corrupted! 01:39:45 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x18020000}, 0x1c) [ 2526.687588] cgroup: fork rejected by pids controller in /syz6 01:39:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5410, &(0x7f0000000040)) 01:39:45 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:39:45 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="646f733178756c6f7070792c000d18d28d0e350f409ff0fc456bc75c58919ebabc8bc79958dd30a1c7cf9cac6cb760f6ba403c06efbbae0417396ec48f3f7ccb222939ccafbc9f322d13f3540fec8d2c376ccaef4507cdc0a830d42dace2902cd89670bd0ef92860f8e0278ad0f36f1140f5558a28c879eb2378a48a2840d4da95d1dda803fda982dc0de2e6a9f8087b1f2196d2c8c58e3c7aa08d489d0cfb38e54b15d19ebf0edefb1ef5ee0637f0d33915065947c1e384cd699fde955f1cb04ffd068c05ca09e8fd7cbebcc565d5016296772a80e8108804bcd924"]) 01:39:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:39:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, @perf_config_ext={0xc7d}, 0x100, 0x0, 0x1, 0x0, 0x400000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x181142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xfffc) [ 2526.996606] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2526.998109] EXT4-fs (loop3): group descriptors corrupted! 01:40:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5412, &(0x7f0000000040)) 01:40:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002b80)={'syztnl0\x00', &(0x7f0000002b00)={'sit0\x00', 0x0, 0x2f, 0x5, 0x4, 0x7, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x7, 0x1, 0xfffffff7, 0xfff}}) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x80, @mcast2, 0x10000}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="72a5acac8186c2979d8ee76140b9893d50344a264501af34af816207dfbcaf58713ad00306877e61ef32bfcfe662787bc816d308c6ea7a80afc0f862b0f3f822818252834e715a90d72720a97967c7e93dffa1ccd154b105f7fee35e449ba1860d861f20f1a6f696eb8d425a0f8fec1ce7", 0x71}, {&(0x7f0000000280)="9ed08b7a28a7c1", 0x7}, {&(0x7f0000000700)="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", 0x1000}], 0x3, &(0x7f0000000300)=[@dontfrag={{0x14}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x73, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @mcast2}, @generic={0x7, 0xd, "19c32f1c21558d32317f2f40df"}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x29, 0x1000, [0x8, 0x1]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000000}}], 0xa0}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xea}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000400)="d52d1b7246f5ec6b8b95a3ed0553e3952a8dfbcb2692c87c095a44233ea1d15007e0d8ac663aa88b12b50bb599a7b26717c21014e623472e0a7871b97a37141391e2c9552ca8a37d1a0ac64d037ed5300d1a31d6979a25f416fc44c07217639377e568e5e52d79b5895bec71d74797691413bbc231d7f97acd2ebc94b92a16e4d7df945357ebd36ede04d405", 0x8c}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000000580)="c560f2d66ffcdc6ccdd6bad84b8f7e329422e1448b0b5bd23976c53a2ab6b42eabc2d736de81f5bccff6712d15608ec5f8f1ba6e398ba520836bacb1fb86d6222401f97416fa1b22ab6d7282fe13308ee6e9e576d8f4baadbcf41fef42d8fcdbbf54e07ae24ed0ecd982e4e4b1f62cf520a9524552e0af8564f229ca2868fc85b19caaa54b9b7520843fa0184a6c57c9", 0x90}, {&(0x7f00000004c0)="1c07f151e648683bb5028f6db69909c0c61bcabff3ea38adb11e568dc1bef8f48b23f15f94bff1037b", 0x29}], 0x4, &(0x7f0000002740)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x3a, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xfd}, @ra={0x5, 0x2, 0x1ff}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x40, [0xffffffff00000001, 0xfff]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfff}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1f, 0x5, [0xf8]}}, @ra={0x5, 0x2, 0x1}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x32, 0x1c, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x20, 0x11fb, [0x7f, 0x401, 0x0]}}, @enc_lim={0x4, 0x1, 0xee}, @ra, @enc_lim={0x4, 0x1, 0x20}, @generic={0xcb, 0xb4, "43e68551a0ee998e7e9dd64e69f6dac0499676f1e45a8e3edc6697561e9331c1d942c8fab67c89a389fa70ffc0043bef4e20870b3289665d60dffe36671ebf23fd56116cf4a3aaa9467a3b8e81db38602ac4926b32eb803ffd21f553b173f28aeb1cc3588985f848840134b259b268118aab643b6416e6646f63476a383a110e588e4ec8939449deac3d29a8dddb35013ada233d62b78e04ef6d5d2aea8a1d107bf7dfec51eb7e88c5917c843577af1799bba772"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x0, 0x4}}}, @rthdr={{0x68, 0x29, 0x39, {0x89, 0xa, 0x0, 0x3f, 0x0, [@mcast2, @empty, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x25}, @empty]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0xf0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x33c}}], 0x260}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3385}, 0x1c, &(0x7f0000002ac0)=[{&(0x7f0000000680)="8f47d9026a4d7f634c66622d85295f1d9500b97852ea6a433378a40c6470906de41f4d949718b804ce6014", 0x2b}, {&(0x7f00000029c0)="4356fbe262551baffab16ced16d031352a1715fd03b9456a9ba1284ab25020b18187e64e0457b4adffcbe87b052e30d0c72d0edf61571800a9749731ce4a4c6e1af4c3b19da150ccf9ce0d760f69ac5b7c2e1c23df154002db8b9fde546727888ec346baedcf1f7890d24351f0bd0b988c598ef5874299c11a0500ca82c588fb96", 0x81}, {&(0x7f0000002a80)="b2c2902c767c66e971ec68980a45b56eeed323b76a9d5e4ee931f4cbd345b483ca08755440ace0", 0x27}], 0x3, &(0x7f0000002bc0)=[@hopopts={{0x80, 0x29, 0x36, {0x2b, 0xc, '\x00', [@generic={0xce, 0x5f, "cf6833a37812f70d3e76660f2db7f61b9e7de3f3499ce61b849e1951fcd96d9332c1f322e45593f228a6536f22237cc968ba66437c7fe10224e744f53c4c2c4927edef77f96702d77e9e0aa4bdfaa2118a5891c0f1bc239fb125eb96c67c54"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x787}}, @dstopts={{0x58, 0x29, 0x37, {0x16, 0x7, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x160}}], 0x3, 0x8910) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r3) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffe77) 01:40:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x6, 0x358}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) inotify_add_watch(r3, 0x0, 0x4000040) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x20) inotify_rm_watch(r3, r4) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) pwrite64(r5, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000f00000000000000", @ANYRES32, @ANYBLOB="696c886c930e268671a40c77fb49aad6d8978d743011028e4294b39f48bd69cd8aeaccce6187627bac380c33ca8b1df7d76b4f513a2677e2a6880ea00ed36e7db3ff63a74aad570cdab37cf2f65dd0a42f"]) dup3(r5, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r5, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r2}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 01:40:03 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x624000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x3, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) 01:40:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2f0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:03 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x40000000}, 0x1c) 01:40:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5413, &(0x7f0000000040)) [ 2545.067753] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2545.070019] EXT4-fs (loop3): group descriptors corrupted! [ 2545.075865] FAULT_INJECTION: forcing a failure. [ 2545.075865] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.079021] CPU: 0 PID: 21455 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2545.080541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.082244] Call Trace: [ 2545.082268] dump_stack+0x107/0x167 [ 2545.082295] should_fail.cold+0x5/0xa [ 2545.082318] ? create_object.isra.0+0x3a/0xa20 [ 2545.085475] should_failslab+0x5/0x20 [ 2545.086267] kmem_cache_alloc+0x5b/0x310 [ 2545.087134] create_object.isra.0+0x3a/0xa20 [ 2545.088066] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.089128] kmem_cache_alloc_trace+0x151/0x320 [ 2545.090109] __io_queue_proc+0x262/0x5a0 [ 2545.090962] ? io_poll_queue_proc+0x50/0x50 [ 2545.091887] n_tty_poll+0xba/0x8f0 [ 2545.092634] ? n_tty_ioctl+0x370/0x370 [ 2545.093452] tty_poll+0x144/0x1c0 [ 2545.094175] ? tty_release+0xe90/0xe90 [ 2545.094978] __io_arm_poll_handler+0x399/0x9e0 [ 2545.095955] __io_queue_sqe+0x52b/0x9d0 [ 2545.096792] ? io_issue_sqe+0x7700/0x7700 [ 2545.097649] ? io_poll_queue_proc+0x50/0x50 [ 2545.098548] ? io_prep_rw+0x7f5/0x1050 [ 2545.099370] io_submit_sqes+0x4461/0x85c0 [ 2545.100272] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2545.101306] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2545.102311] ? lock_downgrade+0x6d0/0x6d0 [ 2545.103166] ? find_held_lock+0x2c/0x110 [ 2545.104057] ? io_submit_sqes+0x85c0/0x85c0 [ 2545.104959] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2545.105961] ? wait_for_completion_io+0x270/0x270 [ 2545.106963] ? rcu_read_lock_any_held+0x75/0xa0 [ 2545.107981] ? vfs_write+0x354/0xa70 [ 2545.108688] ? fput_many+0x2f/0x1a0 [ 2545.109367] ? ksys_write+0x1a9/0x260 [ 2545.110078] ? __ia32_sys_read+0xb0/0xb0 [ 2545.110835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.111646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.112425] do_syscall_64+0x33/0x40 [ 2545.113019] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2545.113814] RIP: 0033:0x7fb499895b19 [ 2545.114415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.117274] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2545.118413] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2545.119535] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2545.120644] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.121765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.122893] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:40:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:03 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x40020000}, 0x1c) 01:40:03 executing program 5: openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) io_uring_enter(r0, 0x3364, 0xd00e, 0x0, &(0x7f0000000000)={[0x3f]}, 0x8) 01:40:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:03 executing program 0: io_getevents(0x0, 0x1f, 0x6, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x1c36, 0x80, 0x2, 0x6}, {0x1, 0x81, 0x8b, 0x7}, {0x7, 0x5, 0x2e, 0x62a5}, {0x4a, 0x80, 0xe5, 0xf25}, {0x80, 0x1, 0x1f, 0xffffffff}]}) r0 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82804, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, r0, 0x1, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100128bd3000fedbdf2508000000d85dda176dd2"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x5, 0x7ff, 0x1000}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000440)) socket$netlink(0x10, 0x3, 0x0) 01:40:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5414, &(0x7f0000000040)) 01:40:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2545.441736] FAULT_INJECTION: forcing a failure. [ 2545.441736] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.444033] CPU: 0 PID: 21588 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2545.445158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.446451] Call Trace: [ 2545.446878] dump_stack+0x107/0x167 [ 2545.447480] should_fail.cold+0x5/0xa [ 2545.448092] ? __io_queue_proc+0x262/0x5a0 [ 2545.448763] should_failslab+0x5/0x20 [ 2545.449360] kmem_cache_alloc_trace+0x55/0x320 [ 2545.450081] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2545.450843] __io_queue_proc+0x262/0x5a0 [ 2545.451506] ? io_poll_queue_proc+0x50/0x50 [ 2545.452199] n_tty_poll+0xba/0x8f0 [ 2545.452804] ? n_tty_ioctl+0x370/0x370 [ 2545.453471] tty_poll+0x144/0x1c0 [ 2545.454055] ? tty_release+0xe90/0xe90 [ 2545.454700] __io_arm_poll_handler+0x399/0x9e0 [ 2545.455477] __io_queue_sqe+0x52b/0x9d0 [ 2545.456157] ? io_issue_sqe+0x7700/0x7700 [ 2545.456849] ? io_poll_queue_proc+0x50/0x50 [ 2545.457490] ? io_prep_rw+0x7f5/0x1050 [ 2545.458139] io_submit_sqes+0x4461/0x85c0 [ 2545.458866] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2545.459703] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2545.460525] ? lock_downgrade+0x6d0/0x6d0 [ 2545.461220] ? find_held_lock+0x2c/0x110 [ 2545.461899] ? io_submit_sqes+0x85c0/0x85c0 [ 2545.462632] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2545.463439] ? wait_for_completion_io+0x270/0x270 [ 2545.464253] ? rcu_read_lock_any_held+0x75/0xa0 [ 2545.464998] ? vfs_write+0x354/0xa70 [ 2545.465642] ? fput_many+0x2f/0x1a0 [ 2545.466223] ? ksys_write+0x1a9/0x260 [ 2545.466844] ? __ia32_sys_read+0xb0/0xb0 [ 2545.467519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2545.468383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.469225] do_syscall_64+0x33/0x40 [ 2545.469820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2545.470651] RIP: 0033:0x7fb499895b19 [ 2545.471263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.474304] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2545.475557] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2545.476717] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2545.477874] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.479024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2545.480130] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:40:03 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x50000000}, 0x1c) [ 2545.513070] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2545.515200] EXT4-fs (loop3): group descriptors corrupted! [ 2545.757832] audit: type=1326 audit(1705023604.161:155): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.767167] audit: type=1326 audit(1705023604.161:156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.774014] audit: type=1326 audit(1705023604.176:157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.786234] audit: type=1326 audit(1705023604.177:158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.795396] audit: type=1326 audit(1705023604.177:159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.800332] audit: type=1326 audit(1705023604.183:160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.810497] audit: type=1326 audit(1705023604.184:161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.818077] audit: type=1326 audit(1705023604.184:162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41999aab19 code=0x7ffc0000 [ 2545.826413] audit: type=1326 audit(1705023604.187:163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f419995da04 code=0x7ffc0000 [ 2545.830346] audit: type=1326 audit(1705023604.187:164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21585 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f41999ac107 code=0x7ffc0000 01:40:29 executing program 5: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086607, &(0x7f0000000080)) r3 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$link(0x8, r4, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r4, 0x0) syz_open_procfs(0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "a92bc66c3c20a712e8e466e1d520dac115f8295bedb651eab51bad54e30d63112f0fdc1e6f8d55c42f20e9a16687006768955ec60148049e33e15cac8c233a40", 0x31}, 0x48, r3) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) 01:40:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x51) socketpair(0x2c, 0xa, 0x3, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x1000) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1a3900, 0x64) fallocate(r1, 0x22, 0x0, 0x0) ftruncate(r0, 0x1000003) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000100)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 01:40:29 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x5e000000}, 0x1c) 01:40:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5415, &(0x7f0000000040)) 01:40:29 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000260002000000000000000000000000001800008008002100", @ANYRES32=0x0, @ANYBLOB="ee372510b6b652d8e4dc2a10306d3d7dad29969ed09324a5787f91b33aa4bf5dd7d8b97760a6c7d1f2d21b8ce73b88d8e2ea3fd33508a0537437333cd566554ce3a859418773458416ef70cfefb84c14328186ae9cdca95da1fcfd5be526bc7fddc14f2e6163ddae1d8dbfbec9b47f0cf3c59f533e8a1757cfaa03556a70fbf1522c4a27a7da49e4d5160025b928659f966812bc915e22e9f751087e02c389b7336606dce4c16e948c5e353199034c64000000000000009dfe6fbf6d85f39b5d8ee2a76e95ed1584e9e8"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000340)={0x0, 0x7ce6, 0x2, 0x3, 0x372}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$unix(0x1, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) accept$unix(r2, 0x0, &(0x7f0000000080)) read(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000002c0)=0x7, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 2571.122836] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2571.124880] EXT4-fs (loop3): group descriptors corrupted! [ 2571.128834] FAULT_INJECTION: forcing a failure. [ 2571.128834] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.131521] CPU: 0 PID: 21821 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2571.133081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.134796] Call Trace: [ 2571.135356] dump_stack+0x107/0x167 [ 2571.136166] should_fail.cold+0x5/0xa [ 2571.136975] ? create_object.isra.0+0x3a/0xa20 [ 2571.137922] should_failslab+0x5/0x20 [ 2571.138720] kmem_cache_alloc+0x5b/0x310 [ 2571.139571] create_object.isra.0+0x3a/0xa20 [ 2571.140497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.141554] kmem_cache_alloc_trace+0x151/0x320 [ 2571.142520] __io_queue_proc+0x262/0x5a0 [ 2571.143362] ? io_poll_queue_proc+0x50/0x50 [ 2571.144265] n_tty_poll+0xba/0x8f0 [ 2571.145007] ? n_tty_ioctl+0x370/0x370 [ 2571.145823] tty_poll+0x144/0x1c0 [ 2571.146552] ? tty_release+0xe90/0xe90 [ 2571.147359] __io_arm_poll_handler+0x399/0x9e0 [ 2571.148558] __io_queue_sqe+0x52b/0x9d0 [ 2571.148591] ? io_issue_sqe+0x7700/0x7700 [ 2571.150280] ? io_poll_queue_proc+0x50/0x50 [ 2571.151182] ? io_prep_rw+0x7f5/0x1050 [ 2571.152011] io_submit_sqes+0x4461/0x85c0 [ 2571.152916] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2571.153947] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2571.154961] ? lock_downgrade+0x6d0/0x6d0 [ 2571.155827] ? find_held_lock+0x2c/0x110 [ 2571.156693] ? io_submit_sqes+0x85c0/0x85c0 [ 2571.157609] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2571.158613] ? wait_for_completion_io+0x270/0x270 [ 2571.159638] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.160602] ? vfs_write+0x354/0xa70 [ 2571.161384] ? fput_many+0x2f/0x1a0 [ 2571.162160] ? ksys_write+0x1a9/0x260 [ 2571.162953] ? __ia32_sys_read+0xb0/0xb0 [ 2571.163807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.164903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.166015] do_syscall_64+0x33/0x40 [ 2571.166782] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2571.167870] RIP: 0033:0x7fb499895b19 [ 2571.168641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.172444] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2571.174009] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2571.175470] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2571.176947] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.178404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.179867] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:40:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5416, &(0x7f0000000040)) 01:40:29 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3185) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:29 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x907996a3}, 0x1c) 01:40:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:29 executing program 5: getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) io_uring_enter(r1, 0x7ddb, 0x4b1b, 0x2, &(0x7f0000000340)={[0x23bd5f91]}, 0x8) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r0, r2, &(0x7f00000002c0)=0x7ff, 0xba) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020e19f0264f4655fe0f4655f0100ffff53ef0100010000", 0x3f, 0x400}, {0x0, 0x0, 0xffffffffdffffffa}], 0x0, &(0x7f0000000140)) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x40020, &(0x7f00000001c0)='/\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1, 0x10, 0x1, 0x0, 0x0, 0x9, 0x80, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x7}, 0x1, 0x100000001, 0x4, 0x7, 0x5, 0x6, 0x53, 0x0, 0x7, 0x0, 0x80000000}, r4, 0x8, r3, 0x0) 01:40:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5418, &(0x7f0000000040)) [ 2571.557494] EXT4-fs (loop5): invalid inodes per group: 44032288 [ 2571.557494] [ 2571.568004] FAULT_INJECTION: forcing a failure. [ 2571.568004] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.570867] CPU: 1 PID: 22044 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2571.572440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.574204] Call Trace: [ 2571.574863] dump_stack+0x107/0x167 [ 2571.575754] should_fail.cold+0x5/0xa [ 2571.576563] ? __io_queue_proc+0x262/0x5a0 [ 2571.577434] should_failslab+0x5/0x20 [ 2571.578317] kmem_cache_alloc_trace+0x55/0x320 [ 2571.579253] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2571.580294] __io_queue_proc+0x262/0x5a0 [ 2571.581122] ? io_poll_queue_proc+0x50/0x50 [ 2571.582113] n_tty_poll+0xba/0x8f0 [ 2571.582960] ? n_tty_ioctl+0x370/0x370 [ 2571.583769] tty_poll+0x144/0x1c0 [ 2571.584590] ? tty_release+0xe90/0xe90 [ 2571.585392] __io_arm_poll_handler+0x399/0x9e0 [ 2571.586442] __io_queue_sqe+0x52b/0x9d0 [ 2571.587263] ? io_issue_sqe+0x7700/0x7700 [ 2571.588126] ? io_poll_queue_proc+0x50/0x50 [ 2571.589144] ? io_prep_rw+0x7f5/0x1050 [ 2571.590053] io_submit_sqes+0x4461/0x85c0 [ 2571.590935] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2571.591959] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2571.592945] ? lock_downgrade+0x6d0/0x6d0 [ 2571.593784] ? find_held_lock+0x2c/0x110 [ 2571.594618] ? io_submit_sqes+0x85c0/0x85c0 [ 2571.595507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2571.596506] ? wait_for_completion_io+0x270/0x270 [ 2571.597610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2571.598553] ? vfs_write+0x354/0xa70 [ 2571.599320] ? fput_many+0x2f/0x1a0 [ 2571.600073] ? ksys_write+0x1a9/0x260 [ 2571.600847] ? __ia32_sys_read+0xb0/0xb0 [ 2571.601678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.602978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.604039] do_syscall_64+0x33/0x40 [ 2571.604799] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2571.605952] RIP: 0033:0x7fb499895b19 [ 2571.606779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.610657] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2571.612208] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2571.613651] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2571.615228] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.616685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.618130] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:40:30 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r1, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x9, 0x30, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) sendfile(r4, r0, &(0x7f00000001c0)=0x4, 0xa0) 01:40:30 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x91ffffff}, 0x1c) [ 2571.701764] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 2571.703900] EXT4-fs (loop3): group descriptors corrupted! 01:40:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541b, &(0x7f0000000040)) 01:40:45 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:45 executing program 6: r0 = getpid() r1 = pidfd_open(r0, 0x0) close(r1) 01:40:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000200)={0x2a, 0x4, 0x9, 0x1a, 0x4, 0x3, 0x6, 0x3c, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsync(0xffffffffffffffff) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x1a, 0x0, 0xa, 0x2, 0x81, 0x2}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x2d, 0x15, 0xc, 0x1d, 0xb, 0x2, 0x3, 0x12e, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x9, 0x0, 0x11, 0xc, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, '\x00'}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x2c, 0xa, 0x8, 0x0, 0x0, 0xbbd, 0x5, 0x0, 0x1}) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') readv(r4, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/73, 0x49}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 01:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:45 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xa151b9c9}, 0x1c) 01:40:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:45 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f", 0x2c, 0x600}], 0x0, &(0x7f0000010d00)) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="a5156cb7848cebea"}, 0x21, 0x0, '\x00', @c}) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 01:40:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541d, &(0x7f0000000040)) [ 2586.783583] FAULT_INJECTION: forcing a failure. [ 2586.783583] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.785292] CPU: 1 PID: 22197 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2586.786163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2586.787227] Call Trace: [ 2586.787571] dump_stack+0x107/0x167 [ 2586.788068] should_fail.cold+0x5/0xa [ 2586.788738] ? create_object.isra.0+0x3a/0xa20 [ 2586.789410] should_failslab+0x5/0x20 [ 2586.789883] kmem_cache_alloc+0x5b/0x310 [ 2586.790405] create_object.isra.0+0x3a/0xa20 [ 2586.790948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2586.791588] kmem_cache_alloc_trace+0x151/0x320 [ 2586.792195] __io_queue_proc+0x262/0x5a0 [ 2586.792698] ? io_poll_queue_proc+0x50/0x50 [ 2586.793242] n_tty_poll+0xba/0x8f0 [ 2586.793686] ? n_tty_ioctl+0x370/0x370 [ 2586.794170] tty_poll+0x144/0x1c0 [ 2586.794598] ? tty_release+0xe90/0xe90 [ 2586.795080] __io_arm_poll_handler+0x399/0x9e0 [ 2586.795659] __io_queue_sqe+0x52b/0x9d0 [ 2586.796171] ? io_issue_sqe+0x7700/0x7700 [ 2586.796707] ? io_poll_queue_proc+0x50/0x50 [ 2586.797269] ? io_prep_rw+0x7f5/0x1050 [ 2586.797774] io_submit_sqes+0x4461/0x85c0 [ 2586.798343] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2586.798980] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2586.799607] ? lock_downgrade+0x6d0/0x6d0 [ 2586.800141] ? find_held_lock+0x2c/0x110 [ 2586.800674] ? io_submit_sqes+0x85c0/0x85c0 [ 2586.801240] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2586.801866] ? wait_for_completion_io+0x270/0x270 [ 2586.802493] ? rcu_read_lock_any_held+0x75/0xa0 [ 2586.803090] ? vfs_write+0x354/0xa70 [ 2586.803572] ? fput_many+0x2f/0x1a0 [ 2586.804061] ? ksys_write+0x1a9/0x260 [ 2586.804550] ? __ia32_sys_read+0xb0/0xb0 [ 2586.805081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2586.805758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2586.806432] do_syscall_64+0x33/0x40 [ 2586.806921] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2586.807582] RIP: 0033:0x7fb499895b19 [ 2586.808070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2586.810831] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2586.811881] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2586.812900] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2586.813808] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2586.814715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2586.815632] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:40:45 executing program 6: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r1) add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x10100) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}], 0x4, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:40:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x7, 0x0, 0xd4, 0x0, 0x8, 0x80110, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc6cb, 0x1, @perf_config_ext={0x6, 0x241ec7cf}, 0x40680, 0xffffffff, 0x401, 0x9, 0x84a, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x40}, 0xffffffffffffffff, 0x5, r0, 0x7) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x4ab, 0x1aa, 0x800, 0x6, 0x1000}) clock_gettime(0x6, &(0x7f0000000000)) 01:40:45 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xa3967990}, 0x1c) [ 2586.825690] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:40:45 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:40:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:40:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:40:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000200)={0x2a, 0x4, 0x9, 0x1a, 0x4, 0x3, 0x6, 0x3c, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fsync(0xffffffffffffffff) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x1a, 0x0, 0xa, 0x2, 0x81, 0x2}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x2d, 0x15, 0xc, 0x1d, 0xb, 0x2, 0x3, 0x12e, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x9, 0x0, 0x11, 0xc, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, '\x00'}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x2c, 0xa, 0x8, 0x0, 0x0, 0xbbd, 0x5, 0x0, 0x1}) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000001c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') readv(r4, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/73, 0x49}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) [ 2587.028571] FAULT_INJECTION: forcing a failure. [ 2587.028571] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.029879] CPU: 1 PID: 22317 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2587.030642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.031584] Call Trace: [ 2587.031903] dump_stack+0x107/0x167 [ 2587.032327] should_fail.cold+0x5/0xa [ 2587.032766] ? __io_queue_proc+0x262/0x5a0 [ 2587.033242] should_failslab+0x5/0x20 [ 2587.033666] kmem_cache_alloc_trace+0x55/0x320 [ 2587.034180] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2587.034768] __io_queue_proc+0x262/0x5a0 [ 2587.035229] ? io_poll_queue_proc+0x50/0x50 [ 2587.035717] n_tty_poll+0xba/0x8f0 [ 2587.036137] ? n_tty_ioctl+0x370/0x370 [ 2587.036580] tty_poll+0x144/0x1c0 [ 2587.036971] ? tty_release+0xe90/0xe90 [ 2587.037404] __io_arm_poll_handler+0x399/0x9e0 [ 2587.037948] __io_queue_sqe+0x52b/0x9d0 [ 2587.038415] ? io_issue_sqe+0x7700/0x7700 [ 2587.038897] ? io_poll_queue_proc+0x50/0x50 [ 2587.039406] ? io_prep_rw+0x7f5/0x1050 [ 2587.039877] io_submit_sqes+0x4461/0x85c0 [ 2587.040390] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.040966] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2587.041525] ? lock_downgrade+0x6d0/0x6d0 [ 2587.042005] ? find_held_lock+0x2c/0x110 [ 2587.042485] ? io_submit_sqes+0x85c0/0x85c0 [ 2587.042986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2587.043552] ? wait_for_completion_io+0x270/0x270 [ 2587.044117] ? rcu_read_lock_any_held+0x75/0xa0 [ 2587.044656] ? vfs_write+0x354/0xa70 [ 2587.045094] ? fput_many+0x2f/0x1a0 [ 2587.045521] ? ksys_write+0x1a9/0x260 [ 2587.045946] ? __ia32_sys_read+0xb0/0xb0 [ 2587.046426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.047031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.047645] do_syscall_64+0x33/0x40 [ 2587.048091] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2587.048683] RIP: 0033:0x7fb499895b19 [ 2587.049114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.051245] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2587.052140] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2587.052938] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2587.053768] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2587.054547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.055349] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2587.190889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:41:01 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541e, &(0x7f0000000040)) 01:41:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002ac504070f1d1a483f000000000000000400000509000080999e00009c000000425ab2d545df5b1adfa939e2283c10f96a1990b212bbc79ebcf173435eef7a780945f1d238f1070628d8719e330623395436ba337d6cda49f55e20e6615281554c93c8c27afd70f0638f87ba203560248bb84029d1d2d40f2e20d784b1c7b5cd1cbadd67c09f422b87fa6dcfc0b3f5e133e601ad9f6dec90507579dfdcbaa8042c2e234ec58a3f1976567c31cc81f504584429af55b45de064b3a0376b530731d4a2efec2122486bff"], 0x24}}, 0x0) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) fcntl$dupfd(r1, 0x0, r3) r4 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x4008240b, &(0x7f0000000000)='\x06\x00\x00\x00') readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) acct(0x0) 01:41:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:41:01 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xc9b951a1}, 0x1c) 01:41:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:01 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x3, 0x8000000000000}, 0x0, 0xd, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x3, 'macvlan0\x00', {0x77}, 0x401}) 01:41:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x329, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = dup2(r0, 0xffffffffffffffff) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x1f) bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) accept4(r1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', 0x0, 0x84, 0x0, 0x0, 0x210004, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES64=r2, @ANYBLOB="dd00a5cdd52e93e31d3f8d18a706278400b98c2f3b37a3cf434b44d188ae6c3afbb203f1adb743721211ca89b058e7fab0fa18ba8db83d8606193063488ff7e8fb4a7b2c970d13386a5d5e53e3920a0c1d6a1473eeefebc7f950a9b9ac64b9b7e50657b14472e2088ead96d3a9ad15ae8ac6fcce7356815b73a1be7258ff9a8409c81852e10796baab61afdc7c56c6e1dc324ebb1375446da4b94c7cdf11d3902d142792cfb81678b1569da3a0e122ee383c5818596006b6ee43c4f1485874187fb717aa713b47f2a68bdb7634c5c9a0bae7965fbe9e90c82d7b2a"]) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x368, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x7b}}}}, [@NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x114, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x36, 0x30, 0x18, 0xc, 0x60, 0x1, 0x24, 0xc, 0x9, 0x30, 0x9, 0x1b, 0x3, 0x3, 0x24, 0x9, 0x9, 0x24, 0x60, 0x6, 0x0, 0x1b, 0x1b, 0x6, 0x4, 0x2e, 0x60]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x2, 0x0, 0x1b, 0x6, 0x9, 0x18, 0x0, 0x6, 0xc, 0x24, 0x9e8687fb2c7d77c4, 0x24, 0x36, 0x4, 0x24, 0x6, 0x30, 0x2, 0x60, 0x24, 0x1b, 0x6, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3ff, 0x1, 0xffff, 0xf5, 0xa4cf, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1f0, 0x11d, 0x0, 0x1, [{0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x18, 0x16, 0x0, 0xc, 0x1, 0x3, 0x6c, 0x3, 0x1b, 0x6c, 0x36, 0x30, 0x6, 0x60, 0x1b, 0x4, 0x9, 0x6c, 0x6c, 0x1, 0x36, 0x0, 0x18, 0x36, 0x30, 0x14, 0xb, 0x12, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x3, 0x7, 0x0, 0x7fff, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x7}, {0x6, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x3}, {0x6}, {0x2, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x4}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x2}, {0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x4, 0x7}, {0x4, 0x3}, {0x4}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x1b, 0x6, 0x1b, 0xc, 0x24, 0x18, 0x18, 0x1, 0x1b, 0x2, 0x5, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0x3, 0x1000, 0x1c0, 0x697, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x30, 0x83, 0x32a, 0x5, 0x1, 0x2, 0x5d]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x8}, {0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x8}, {0x2, 0x3}, {0x2, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x4}, {}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x3}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x368}}, 0x4800) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) [ 2603.159927] FAULT_INJECTION: forcing a failure. [ 2603.159927] name failslab, interval 1, probability 0, space 0, times 0 [ 2603.163160] CPU: 1 PID: 22439 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2603.164769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2603.166684] Call Trace: [ 2603.167293] dump_stack+0x107/0x167 [ 2603.168162] should_fail.cold+0x5/0xa [ 2603.169049] ? create_object.isra.0+0x3a/0xa20 [ 2603.170119] should_failslab+0x5/0x20 [ 2603.171001] kmem_cache_alloc+0x5b/0x310 [ 2603.171973] create_object.isra.0+0x3a/0xa20 [ 2603.173006] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2603.174250] kmem_cache_alloc_trace+0x151/0x320 [ 2603.175481] __io_queue_proc+0x262/0x5a0 [ 2603.176563] ? io_poll_queue_proc+0x50/0x50 [ 2603.177699] n_tty_poll+0xba/0x8f0 [ 2603.178628] ? n_tty_ioctl+0x370/0x370 [ 2603.179660] tty_poll+0x144/0x1c0 [ 2603.180587] ? tty_release+0xe90/0xe90 [ 2603.181748] __io_arm_poll_handler+0x399/0x9e0 [ 2603.183157] __io_queue_sqe+0x52b/0x9d0 [ 2603.184243] ? io_issue_sqe+0x7700/0x7700 [ 2603.185325] ? io_poll_queue_proc+0x50/0x50 [ 2603.186458] ? io_prep_rw+0x7f5/0x1050 [ 2603.187496] io_submit_sqes+0x4461/0x85c0 [ 2603.188646] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2603.190086] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2603.191407] ? lock_downgrade+0x6d0/0x6d0 [ 2603.192593] ? find_held_lock+0x2c/0x110 [ 2603.193716] ? io_submit_sqes+0x85c0/0x85c0 [ 2603.194853] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2603.196125] ? wait_for_completion_io+0x270/0x270 [ 2603.197394] ? rcu_read_lock_any_held+0x75/0xa0 [ 2603.198608] ? vfs_write+0x354/0xa70 [ 2603.199587] ? fput_many+0x2f/0x1a0 [ 2603.200613] ? ksys_write+0x1a9/0x260 [ 2603.201784] ? __ia32_sys_read+0xb0/0xb0 [ 2603.202948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2603.204327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2603.205687] do_syscall_64+0x33/0x40 [ 2603.206666] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2603.208028] RIP: 0033:0x7fb499895b19 [ 2603.209009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2603.213834] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2603.215816] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2603.217686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2603.219542] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2603.221427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.223286] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:41:01 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8531) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2603.253630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50474 sclass=netlink_route_socket pid=22454 comm=syz-executor.6 01:41:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541e, &(0x7f0000000040)) [ 2603.315240] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:41:01 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xe8030000}, 0x1c) [ 2603.356991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50474 sclass=netlink_route_socket pid=22463 comm=syz-executor.6 01:41:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:01 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, 0x0, 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(0x0, 0x20) write$P9_RUNLINKAT(r3, 0x0, 0x0) fallocate(r3, 0x20, 0x0, 0x8000) openat(r3, &(0x7f0000000140)='./file0\x00', 0x80, 0x1) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r4, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e") ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) unshare(0x48020200) 01:41:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5421, &(0x7f0000000040)) [ 2603.656771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:41:18 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5422, &(0x7f0000000040)) 01:41:18 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xf4010000}, 0x1c) 01:41:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:41:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:18 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x4, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x1]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x24000021) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0xcc481, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x13, r0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r6 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r6, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x69, 0xfa, 0xc8, 0x9, 0x0, 0x7fff, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x2800000000, 0x9}, 0x0, 0xa, 0x7ff, 0x2, 0xffffffffffff8235, 0x9, 0x5, 0x0, 0x2, 0x0, 0x3239}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 01:41:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r2 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x1, 0x1, 0x1, 0x0, 0x16c3, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x92, 0x2, @perf_config_ext={0xe8b1, 0xffffffffffff8001}, 0x100, 0x5, 0x6, 0x0, 0x3, 0xc1c, 0xfff9, 0x0, 0x80000001, 0x0, 0x3}, r2, 0x2, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x0, 0x5, 0x1, 0x0, 0x2, 0xc1063, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xffffff7f}, 0x2924, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x40000007f}, 0x0, 0x0, r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8300676ca12ee5"]) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) lseek(r4, 0x0, 0x0) getpid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x6609, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x80, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x7, 0x9032}, 0x0) fstat(0xffffffffffffffff, 0x0) fcntl$setown(r3, 0x8, 0x0) 01:41:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x80) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x2c, &(0x7f0000000000)={0x20087b6}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x2c, &(0x7f0000000180)={0x0, 0x0}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000040)={0x3, 0x4, 0x78, &(0x7f00000000c0)=""/120}) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x100000000000000) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @empty}, {0x301}, 0x2, {0x2, 0x4e21, @remote}, 'ip_vti0\x00'}) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000240)="f1a12beadf713f4dd72034029b7f78bf647c7e55ddc1edf36a075a4a4bbf17ba36e3ee663a478f5fa5256542ca6b4256eca1366aeac21b0a1934d9fe43ac032aa43f5f08cd9e121bbec70fffc4eb810a715cdb7c51d6a30331adae4c0817d517eca68b5512813327fb96d8172369d3f3cc0d6f77be4a5ed388166e682ebcca038cf1eded3e91ebf1a4ae1753f40c1dd88ff0fae952edcb4d9f4b19e85fa028e98f", 0xa1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r5 = getpgrp(0x0) kcmp(0x0, r5, 0x5, r0, 0xffffffffffffffff) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x10023, 0x0, 0x0) [ 2620.307667] FAULT_INJECTION: forcing a failure. [ 2620.307667] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.310588] CPU: 0 PID: 22602 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2620.312052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2620.313836] Call Trace: [ 2620.314411] dump_stack+0x107/0x167 [ 2620.315210] should_fail.cold+0x5/0xa [ 2620.316051] ? __io_queue_proc+0x262/0x5a0 [ 2620.316975] should_failslab+0x5/0x20 [ 2620.317794] kmem_cache_alloc_trace+0x55/0x320 [ 2620.318769] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2620.319857] __io_queue_proc+0x262/0x5a0 [ 2620.320738] ? io_poll_queue_proc+0x50/0x50 [ 2620.321677] n_tty_poll+0xba/0x8f0 [ 2620.322430] ? n_tty_ioctl+0x370/0x370 [ 2620.323277] tty_poll+0x144/0x1c0 [ 2620.324024] ? tty_release+0xe90/0xe90 [ 2620.324883] __io_arm_poll_handler+0x399/0x9e0 [ 2620.325864] __io_queue_sqe+0x52b/0x9d0 [ 2620.326721] ? io_issue_sqe+0x7700/0x7700 [ 2620.327622] ? io_poll_queue_proc+0x50/0x50 [ 2620.328566] ? io_prep_rw+0x7f5/0x1050 [ 2620.329381] io_submit_sqes+0x4461/0x85c0 [ 2620.330297] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2620.331356] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2620.332429] ? lock_downgrade+0x6d0/0x6d0 [ 2620.333304] ? find_held_lock+0x2c/0x110 [ 2620.334186] ? io_submit_sqes+0x85c0/0x85c0 [ 2620.335112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2620.336179] ? wait_for_completion_io+0x270/0x270 [ 2620.337218] ? rcu_read_lock_any_held+0x75/0xa0 [ 2620.338217] ? vfs_write+0x354/0xa70 [ 2620.339024] ? fput_many+0x2f/0x1a0 [ 2620.339801] ? ksys_write+0x1a9/0x260 [ 2620.340631] ? __ia32_sys_read+0xb0/0xb0 [ 2620.341503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2620.342600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2620.343683] do_syscall_64+0x33/0x40 [ 2620.344490] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2620.345576] RIP: 0033:0x7fb499895b19 [ 2620.346352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.350254] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2620.350276] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2620.350287] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2620.350298] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.350309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2620.350320] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:41:18 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xf5ffffff}, 0x1c) 01:41:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5423, &(0x7f0000000040)) 01:41:18 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) preadv2(r0, &(0x7f0000001500)=[{&(0x7f0000001100)=""/214, 0xd6}], 0x1, 0x6, 0x0, 0x1) r1 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1}, 0x80000000) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) write(r0, &(0x7f0000000200)="f8d4578809d8e55c351e49a9b6f4326ebe7945a9d72741821c5f9331debb14f917d3b5da12a08317f35a3d89a2c3273d5b32a89a0d9358512a413874ebc996987e5096db51c923731cb444d645e54b2c2b9b456882febdfce64e6d33c3cb25b7eb7b18a089", 0x65) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getpeername(r4, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000000)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r8, 0x2b, 0xff, 0x1, 0x5, 0x59, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x8000, 0x20, 0x6}}) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000004c0)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2620.540664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:41:19 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf002) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:19 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfc000000}, 0x1c) 01:41:19 executing program 6: flock(0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffc0000}]}) eventfd(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x5, 0x7ff, 0x1000}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4b555333ecf8a51bc928dd6eaa000589524362f114d305fbfca035c44ff5e1b53d0e17cc6c2794bb004bde6d55773b80d33432689b27cca5d2c6e66e64", @ANYRES16=0x0, @ANYBLOB="200028bd7010fe9bdf250f00000008000300", @ANYRES32=0x0, @ANYRESDEC=r1], 0x70}, 0x1, 0x0, 0x0, 0x44001}, 0x44804) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = accept4$unix(r2, 0x0, &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[r4, r5], 0x2) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0), 0x2, 0x2) 01:41:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5424, &(0x7f0000000040)) 01:41:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) [ 2621.014836] kauditd_printk_skb: 11 callbacks suppressed [ 2621.014853] audit: type=1326 audit(1705023679.418:176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.029018] audit: type=1326 audit(1705023679.418:177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.044301] audit: type=1326 audit(1705023679.425:178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.057849] FAULT_INJECTION: forcing a failure. [ 2621.057849] name failslab, interval 1, probability 0, space 0, times 0 [ 2621.059924] audit: type=1326 audit(1705023679.426:179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.060736] CPU: 1 PID: 22849 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2621.066395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2621.068202] Call Trace: [ 2621.068763] dump_stack+0x107/0x167 [ 2621.069567] should_fail.cold+0x5/0xa [ 2621.070458] ? create_object.isra.0+0x3a/0xa20 [ 2621.071544] should_failslab+0x5/0x20 [ 2621.072421] kmem_cache_alloc+0x5b/0x310 [ 2621.073360] create_object.isra.0+0x3a/0xa20 [ 2621.074294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2621.075465] kmem_cache_alloc_trace+0x151/0x320 [ 2621.076525] __io_queue_proc+0x262/0x5a0 [ 2621.077457] ? io_poll_queue_proc+0x50/0x50 [ 2621.078449] n_tty_poll+0xba/0x8f0 [ 2621.078667] audit: type=1326 audit(1705023679.426:180): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.079176] ? n_tty_ioctl+0x370/0x370 [ 2621.079201] tty_poll+0x144/0x1c0 [ 2621.079229] ? tty_release+0xe90/0xe90 [ 2621.086695] __io_arm_poll_handler+0x399/0x9e0 [ 2621.087939] __io_queue_sqe+0x52b/0x9d0 [ 2621.088924] ? io_issue_sqe+0x7700/0x7700 [ 2621.089920] ? io_poll_queue_proc+0x50/0x50 [ 2621.090349] audit: type=1326 audit(1705023679.427:181): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.090955] ? io_prep_rw+0x7f5/0x1050 [ 2621.096500] io_submit_sqes+0x4461/0x85c0 [ 2621.097144] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2621.097907] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2621.098633] ? lock_downgrade+0x6d0/0x6d0 [ 2621.099249] ? find_held_lock+0x2c/0x110 [ 2621.099847] ? io_submit_sqes+0x85c0/0x85c0 [ 2621.100487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2621.101214] ? wait_for_completion_io+0x270/0x270 [ 2621.101898] ? rcu_read_lock_any_held+0x75/0xa0 [ 2621.102551] ? vfs_write+0x354/0xa70 [ 2621.103084] ? fput_many+0x2f/0x1a0 [ 2621.103605] ? ksys_write+0x1a9/0x260 [ 2621.104143] ? __ia32_sys_read+0xb0/0xb0 [ 2621.104730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2621.105469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2621.106203] do_syscall_64+0x33/0x40 [ 2621.106750] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2621.107473] RIP: 0033:0x7fb499895b19 [ 2621.108010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2621.110621] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2621.111730] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2621.112751] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2621.113753] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2621.114745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2621.115740] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2621.123255] audit: type=1326 audit(1705023679.450:182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 [ 2621.135446] audit: type=1326 audit(1705023679.526:183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdd8243a04 code=0x7ffc0000 [ 2621.143491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2621.148028] audit: type=1326 audit(1705023679.527:184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcdd8292107 code=0x7ffc0000 [ 2621.182446] audit: type=1326 audit(1705023679.527:185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22839 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdd8290b19 code=0x7ffc0000 01:41:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:41:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x644}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {0x0, 0x0, 0x7fffffff}], 0x0, &(0x7f0000013800)=ANY=[@ANYBLOB="ff"]) 01:41:36 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfe800000}, 0x1c) 01:41:36 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5425, &(0x7f0000000040)) 01:41:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x3f, 0x3, &(0x7f0000000680)=[{&(0x7f0000000400)="c5f66d53202b2a0a2e70bbc9db0cc660d36d6d5f", 0x14, 0xfffffffffffff801}, {&(0x7f0000000440)="d886acbe7aaa0125ec513b17bd87818cbd710f64dac602", 0x17, 0xfff}, {&(0x7f00000005c0)="45770d92c7baf3858b4e2a0fa1ef88f785724ef16f925d0e8bf9ada964879682bcf5d186a265cd7a226cc5589fc7eab9dc40b40a78837d1940f25ff75e3e295991fd6f5d5f372ed09bfff65cd07e27aee5ae7df046d33a872003650f55034bf5acc7c27cc69e0655f19da493f2451ea29c131b155c85a5843541eb45c85d92031d1fd3f0755bd716e14e7fc2d61dbc8fcaf3cba1916561c924a8061e29da", 0x9e, 0x20}], 0x10, &(0x7f0000000700)={[{@fat=@check_normal}, {@nodots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '+}!]'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r2, @ANYBLOB=',\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) r4 = fork() sendmsg$nl_generic(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000001e00)={0x16ac, 0x1a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x3}, [@generic="88d0269ca996867082b1047722bb0746d57aad1cf46b935a5e94fe308f1e596a07c224b393e11ae8edfcb1e78bf5c186baf9a19cd2b4f0e1b5af4a3ebf576551c54b65cffa87ef998cab0ae64f28aed3af71feba85aa95bea04af817ff44e98ead4418b3451300198a00797f18517649b4edc7a61dc5f04d7e626f7363321e88791ca3dffbe34deca298812ba006142b3555e6b4fe000a647ebcc9ea92874f8aeab048df9f343922ab6d21ecf4c0117389322b1915b3bd2e6933484621b8c693256bbb138986cb27fd8d6c4f31a322698e213be9f580530626f26d7e342b114954b8944edcb8776e2d9d182f9aafe29690548f49e80b8c36280a7b9cd3c6d77396f017f28007507c5ff19844de775538c220d662e31bfc15598ae66e2cd1bcd0f2f02717ab9c74fe056e0f06438a3244fde47671ca74179bb0f59bb794a44d18c393105a9264e55aca00d8f5eccf2762d7d5000355611d3a37866eb1338f0b615b4061636ed7a2cf009db0950bc74385691c7ff4ccfe271535bf7e4d7feb5dd448bc89fb9d31678b4b7f357c73251ce5a2e41a0e281af9b3e8308d901ae7b036b2ddcbe3c1504c43de5d5d05208d6671ade28e471dc9a32011b0a316bfff7f1b79a17ee522f4e2740cd7d2821f359d6f859725acd011bae40b2273c47997aa60ad805e83de9d72f1328c1b704c753922cf4156916f3d1605e36608340d17535cad786719582aaeb633180de7fc6893e84b85b524463d95dac00a23ffb07fa53b8362229c675d8c08371bf49936520eaf40a74bfdbd5c0db5e5a28c5435927df9802e8d977da8852dc14f3fcb8010a72ffec7c58c96aeded45761391646095baf32fe71aa9adbd1a0ec3bfd906c3ad5e1dc095d55cf02320164ffce3fb365314b488ed013d5e6e71512e6a70943407117cee9585cb08e131c3a96bdf5d3d977e23107b4149518b4865ff316dcb9c9bb5fa7b097508d560eed8ed7755d49091c14b6c595d35b1ee22d208a2fbc673549330841479caa124160d77c4b35b53dbd178b2877218f1efd5d7d8d4d13cb8ec3e0b594355c84e802f0aefc76adf79bff24d31721f5c5a860c1720453fcf51f8bdd8fd9927ccc165917e97c5f2f9fc2fbb85307993eab126493682d5954a2d2e9345cbf4c181dbb64b3faa49a29c5489b6367d5f527b535ca3b53fdd2270318290e4e107875a20adfae383dec139158843d1f16ba4594e72a3ec5efa5178d9b421dd0096154c697f12a2ad3a92961280bc8d2032008f24400376f730611cae6a92e30bfff9a87ed82970aad9e3bad905934aade44ebc096e8dd1d138ba9c4fa3b4eb7320b0976b252eb0ccda44a6bc52a16a00914052830260f8a3e6d80258d8e863036ba61d2823417ed9ed7afa7c40a91ef923ce5cd129d8cdf0cf8be5bd22360fba5369f3b89d2e68d0a1e68fb7bc475bd8177f6add12ce04e0c01973b5d0dac06625f3fbe69c87172161a12fc743a047e0ebeb570af8a66efbcfe7e653d32805078b3694f66f76fb5dbf1d3eb4d3297b4ba422ab68fac963f1514e69efe6b6ba5be666564cb3baea15c32df3e5775d686b529d1a051c013c64524e87c2440d0c3d43a008229c1eb48e9ef559733d7c580f2a5c9b2529f29461e6de07c70d84b6f1d01de64fff9e6dafbc83ca447e0295dbd567d430d1a44e749791e4c54bf57fc706bdb999e6b403f5729d2b21faa6d4d28dca6e548523e26095d108441a6061ffd5ee4085a318b0f597e20e556d9d61400498f48b99746fd94a81aef18dbd97b48eeed74e12ed8239c01cc97d2b45467b0baccb7f00f31d9a4e7d731b6db6b2654d2054dbbbebbb8c3694ba15772c4729b35ba5da097e9fba2d3814845a84345c6aa68c8b20f61e23af1b4bb2354bda9c79943874dc374fd02eebd61ae2de82bea17c713b8805a92b6c30c829d223e82c6b32c0ec58daeb3f45827ffc93405af1932f5e7fa68aa8f2575c4ab78dd93d75c13e613e7bc2918a23d912881673384cc0ac384160599cee048322818d43f216544b6142f3b4de3ac22cc54cd552e39d533f98722bb5281d35d0b76d192df6db6b5ffc2c3dd312fe56fb76ef53d7a76af7da23dd7737d12d033bf399009790a400650280992a1ff156a49078f850995149bd07dcb50a2f49cd056aa494d86b7c034af835cbf4bebaf46c6c7d3216b8673ba307e0adb1bfe7dee529c5ccc7b753b5afa3573cb49fa25448ed92fdda2fa2dfd083d92b88588d3527a4652d798d682ab787a663fef6edbf94d86df835062df66d5cc5933517e1b6be9382524ea6aa2e0c4983f98cf66944dfe6a8f4a29a0e2057296d73600c5ce06559c39ceb2136dcea2a5716058668ea3da02ddf92d0c8bc5634c0a5771050a7529df5b181ceec7f7c05331ac44afe2c7e631938379fe87cba9824fdedca9158c6123caa4dce463a7d44b48358198a6bcda30b6a155b4a8b7382883ae251a1e3a06eb45babd6d1c7830f5dd00b99c7fb0af3011db78960b1e6a5022ef6c9cc7510e90e7b9e3c7ec91dede971038eb6dba1dab6aa049f6239bcd4def9dfea21582f9e671406f94631a9f78d14902245b8e73944362ec79d31f625567ffdaa278462ae5b206f1a343bd45c1d5d8b51930ed4293222c53e1c56f2059a93e628c70a7911f3b33eb001dab1ec5db8a0cf566f29c9f14914b3e3ca72e8056fb5192d0dfee56dc53bdc4d69c63132dc132a398504f9b447c1379bed69754b5d3439258425ffd569ba2f4a6ce4db00f7e5474f3c7d6d80c444306058e0b78d38c3ffb73ee498354d2063fb2b4d96e10fe91d1023c8b2b57d053f516598eceb3f3c5a70d6b67520d4a79b1c78eca1fe5adc7c758b0638753793e8a78dffd46fa77ce9ae4b2d9c80451fddedbc1329a8b6fd218be93a6dce615f3b9fbe6190199ea910b497831ef3d4a0d00ac225d912b20cce312cdf0ee23ebb71e11065877ec4e5bd2581bc8039dbc6c2c7f24486be708feef0cc14db96bbb9c063e143a111277cc51ea86988be0a8e4141574f37d18f52a12d3366f6441a6ba5eba4d2a28a1f7888ae4b98ff96c8f06869836dda24ba0f577d75fb81e337e4eeac2dedaf5cbb34905f51296a273dd5395243651fd94a4421e8ca5c93e80a6fd825b7c9ba6e360fd6fdfdd00fcfdf6aee5e7ca264b11a3f3d3497158d9ce7d73e844244ab1a511c35fd857d9c4f90ae3c1c4b9fe002f0c5a534be86d454b3a5604772bdad47756b2d13d828fbea07067058238322ef33f26b162cae36c4b7d4f85a9854482786818e8a420b77180c3f95660cf3162371b8338c823a9e89093feb6b7e44be140513aeb1e18b936a8e158d39642fb3577a5ebda82084bdadf1652774be9756a5a54a5c5411b5235724e8389981df3d2214a633a0c0832032b2a9f07afe2c2e21a17984094cc1ce0a5b03b1d795ac6fc71a31ce419584dd25b5908daa6fa8b45a125426ebd01456a25252192a707a0afce81cd7af337a6b8cec7be18054590fa3cf631b2c61dc504726ba71b2d79427631f05663627c7c148e4835ea8d154a7d466335c3b337c7352d8b424985a8377872d8b45baf27f31d410d83a1985b0eb3d3729fb396aae5c4e0ee2ffdd3c4dbea53cbcba699135a9c03e3766d938db106ba333a99a0ac4e383f51bc013982f455800a391b24304b0e41d4b810afee9ee556fcc391a43075b6320945c6448204308f0718929c82a00cafe76cd0b39488f5ac4640cf8c5bd04f2cdcf42e397d8401d92d6d6459e7f8394a65077e6fb21e8dbcb356acb33df7704d392a4c290d74ed02e6faaa0d84bb40cc5cce4c23d1d2b24bcc767400e15beb8ec88687ffee66734e9f154f300bbab026c22c5fa7e119b2279bd2b7018cc28661b2dbd38cf8c2a8ef660804e9358106ab2dca626858a1e36eba7b3b1df175e9a494cfce216bb7961d3bda0c236b56fbb37b7604285f9d022bbcdeaa6e46c966fa94a3a8d8e959a25716912b5960e9666ade708a796e6bbf4b513baa8399105892b1c95e38bad8c3a9ad07830bf9851db6b23901268434996643691172fdf4451825967dc9adeecdf1b0500e791176c1f1890ebdf11f577c8741d956142c41407d16edee09e6c27c35d3f8a39970c81ccd7c619db37efffc6af2151284105878fc44bb674ea01455a840eb1fd05c2588034cefe23174eeb43e3dd219c2c7ba64212530658e1e06495836a7f97c4cbc3b02e140d1717458c0c8f365566b82402dffaa4bc47c9ab33afd8ad5dfc0338feeb100b98ab64edbdcc087a79cd1051627b6e64a43bc2f5413878a9f94936ac4d142ac6f75c8adb059bb60a9970e68d67c21d50d1e0cc80f6b83f836d1e214fe972db9aca8ed68e4959888c858481e655cd111fa9e04bbe59db0a2b59e2700ad9ea0c89c567482371e26df71babbd32eb2a9f8fbbeaa5efca7721b9f1939661b36529cc72ed9d760c2409064e6b95fd656af2087e182cd09ab4752e7726a6fc84424f484807bbbec7db06f6d994fe8a8076d8a7e9b20a7d47f06a30d3942d01f9a4db5546b55ed866b526cd1904f451358914912336535a57dbc57cf6e9b63d3694c8df6e3f91714b390990533554d9ce818f60f7a4ff67632ed3557bf3e63bb8b930628bb769b2770ed5437891cb7a3dd27dc4ce3972a3bddc3ba31b4218c45e38385336e148fe2a0e0fdfe9f76ef55529ac9346e642f21fef8d1b0d9a3c819fd3e4d35b4ff257b360756b0375da59b5f49088d39a1af11d3fca18db18eca2511899c7462f6a59f53572bddd2909de951337096bec22b18555a01ec952512cee22e1ffd241e4760286450c60e6002cc16cbf5449f183379b8d8d2bcbd47a2c540351fab004fed8d55fc83fd6a0c7ac75bf6ed52bc3b547f962bb7f37992d5055ebaa78ba41f55413bc370b58037371538bfe3321e1843bb771ca27a4aa2c50704e2a0060452bcb22cbf95ade49bdca45080397c00c9bc944987893d9fa41d6969647a94c3f94ff2e0250247dcd097dcb7cf4f6e775c8bf1d0b0d97307e6423fa72917bf7d5886de7a1a95d4f47bdcf16709b3ebc28d1bd83bd687f77bec322b5734da9ba6e3bcefe9f25e271b5ce3f619a78a11b24fb35f78c0dc35706bed934c60039343877c8bd15ba33e5eb7a5f1dcf7d4df31924bb926ddf7c0713c546e2cfea2e65f6b7284d4b60399fafefc8eefb73c3d0aec2db3e4219a22a8225e99f9d0789d3208fcc81241a12a05dbacff96522fbdafbc358a3df7b222256bb91868239244c63e7372a6759c71af4cc187ae57b56636021cfcb357638aefe6536d67d486120cf57906fc08808933aa781cb625698188d15c67f97fa70817546321c84404baf7bcb63944b9f4228c874c25d7f3e215b56acdcff984333c89acef31296c24bac465e2f6433c8269c24df99bd1f03c4a24b3fd049ad1ea0470584f463df4ff97e4daa2cf69d4dbbb4cc9881a434e4355ea9c5aefdd1e491e657e176f891fd046884d76244dcdf76652280ecabb29ade72a6dc35a4f8c8d5860eafd8875612b42f4c075eb9924dc97366192a708f533114a8e8c717da566dd3cc217facd3decf13d2f6863bb3bd1d2804dbebee3025db13fe119d0c5b4ce52b9cf01bd8833c692b4555b88e269d584b2c2540b4bd9ba5106f257c8cda7613197c11ba4b6ce55da847d634460041d71eaf1b36a395c19252a3f6f31decec43dd0d66fb952d6d16ad1765eb1647d7c1214911bbf17b697c0f54c3c4c64fcad6eb5628dabdf7e7f87340bac08926a3ab474c1c127f00d9f42", @generic="5a12e6b7cd0b8854fe7d71f7409de0652ac4307fcf9f4cfca0c676700060a06f", @generic="117b5f6a32f17fbde3064e398f3a15e06626eefc5acf3ed88e48a2133e47d52640ff4c9568b5f4d2e82b3fb14c3e74e46082d33cdc6491284ceed01099b0c2211b5883698ceadbe390daf5077e7563dccd813920b830a1584e9f40f18fe1249871423d6ee10b1fe795a039bb6deb2b68f22c0a5ec1ddb55c12f725000f8266d92947c107318009eebf19bc79772c7ed0415b2f93500b5bf20c5fc7b2314865fb27c693498aad3ab1fa4b2e270882727ff9c9197dd5060b8194812607019ca8169fa27dceaa84e3aafa5eff68bfe2c1016d5cba77ea3c0395e5b5895008605ff5f4299bc82f28fc761fac384b0e1c629270ea", @nested={0x137, 0x4c, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r1}, @generic="dab4a64b159e03ab8f09e561d299711b0889bf481df0", @generic="843c639252ad850982835790034c453039a6301d0cde3db6e7105fe9d1da2383195991c031c872df02849edc67", @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x8000}, @typed={0x8, 0x5, 0x0, 0x0, @uid=0xee01}, @generic="cec00efd15bc77b9c0531707e6373fe19f07b89aeca8a6437060a854af3a763dff0aa749eaf5d2e4ae7d1e478d1d4848e3498f2f15ec8337cea71452086eaf9763392c47f7cd3641d2b2991a3a5e39d21448d6818fe3067e9a5264d1d9f65d9dfb015057308c8a2333041dd51ba00a586f6a33ed9569647d66df1a4e326885159c4aeba77decea26d040c1e63df6e1f550c5f770abacdd267d4d293fc3857b7c8c25b4f8623eb053b9ca0091576f8864e807a41d249bf3f9fd91b194051e91dca6655acddf1c693a249c8ba1", @typed={0x7, 0x1b, 0x0, 0x0, @str='[)\x00'}]}, @typed={0x8, 0x2e, 0x0, 0x0, @uid=r2}, @generic="433768d2dfdbf8c56d9081918d63f0be7b96b04f5ce56f89a4bd10f4efbe1fe381e67f4600f01f18b713e8dd46343eea34fdd0e69b1f973c9cb2c9d89d827c8889d282915fe3529e630558554bf6bdad209e35b8fa25e3e2a8b650cfe5ca2b4e9dd9e995fa2a6a07856a4a0e4e1f9ffe689e2fb4391bafad39586da004a83c10ad5f6982d8072265ef85abefaaa46a510f440102953e", @nested={0x128, 0x87, 0x0, 0x1, [@generic="4fa0ad0dc56b3413e9788f3b475cdb5c9d84334bf5a645254eda091762a2a05598dce213893b96b22a8ad1d0ab9cc9a93161130e743abea7d690e9e21f2b991fb29049dbba288e8e2b3afdd6178b8a3df48bda2c66ac1097d769b99e63893d5001f3f3c65379a8b06b10dfbf6e4f453753242ccfd9b28158af29e5e24f3e74f46817493f233165e8b7faa07d4d1fe0d8a19270ab7b04032079e55b24266957539384b39c8b60fc4cfee5c1c2560a9a2bad260b97", @generic="2d19cd0b92167b672cf2b3aaf55053bd321596dd0da9c3638954491678194df7b7b3b55388fb2b9157b96e39a866441b7bff0aa20e7a9da4da4c4028188b7bdb65b4372658e621533cfb470a971df35be24aaa5128b724cefea2f8579f9d59212b9055473f26b5c6fb7b840c", @typed={0x4, 0x49, 0x0, 0x0, @binary}]}, @nested={0x19b, 0x30, 0x0, 0x1, [@generic="c5f5ffca9659b7a208b422d611e9421ff4a0553facc666406ad31036f2cc9093dc760056b656372c2eb89a6dc131bc4008665e679226c0ad55fe146740d285afb4104e89e1950d7cb1ee5d85fe453f7c58a2331987fcfc77773d58e7defa4d0b30f15351322f9982a12cc93d86cf083b33d5f125f50e14fa6957058e736d0b891ed0043864feba7cbec90eac2bb689d72233990d", @typed={0x8, 0x7b, 0x0, 0x0, @pid=r3}, @generic="78f2d8067645190df31982872b984c1f353a2f93c77c91d431b1aaf5d37984560c37212bec40d3442ac815d69fc6900e63f8cc635e2407a32f7aaff446a7c4e47a349633b989157c22648cb4f87f63a914b1ed6ce27fa2165e3ddd93a02b26cef08f177801c8d33727e73f88cc42498b618af02cb90b8a53953ef57cb12feb939051c4ded21c467c05304043905a3ac35a0e9e5391a1f519bcb0917e019add10713499be284b0c30b726f65ed019f6a5b0d5895813cac2a8b236fa4e8ec9e325d2852737969d63e90a98532104b5068d87c3fb02874f99d5611ef3bad7a64bc6c6923858f78286901328a05e0d0782a194cdd2174665fef61aacc2"]}, @generic="3cfbf0e433324eaeba580c1aa8144c8ffca67492d641650bd9da45dd363378cd5c45c73ba9e9beedfebd3d0b4fe0b149bfe2167b40fe0659c1a5237f632a1a62ad0f457dab1bbf57e4ce37f072391c9de96e3f99fea4917c2c079b2e96233df555d905f85d5a08cb96633579c27e62c93799ae96f523b681d239683ff110472d59e290ca132cb5e3eb8635a367f5e60e145e139be19ea6607d181146d0ec13a9a48a2e70fc118851e5ffad60ce88d7e906fa8fbdf2e165e85a2eab81a72be0e8d0ca29ae5377880ff3a0cd5ec5bbafb666629d38ed54ba2036c60cbb7276384ac8cb6160", @typed={0x8, 0x60, 0x0, 0x0, @pid=r4}]}, 0x16ac}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000000480)="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", 0x10e) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r7, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) r8 = accept4$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x800) read(r8, &(0x7f00000002c0)=""/189, 0xbd) 01:41:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:36 executing program 0: openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x101}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa457}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) fsync(r0) r1 = pidfd_open(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{}, {0xffffffff}, 0x1a4, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="ea83e625f4496350af6ca029df3c7d466154bb9b61f3c6833fd1087ab8382a5dbf007e4d5469df59446818eacbf592d8467fcc62ec5e9a608d3e6c87c5fab2dd64f398b757e64e675e0c8c810aab843e73e58f0c5e08d35efb88237adf4ffd8f2fa8a8df02c0116e867cef2ee6818b3e6b9722ded9660c6573669fa92993a71ee3cd1a45f985faa22a50acb653592d67a0cb78902cb748713704ffe95be0560f5f6c66f12b0d70edac62ead7171eec1aee1ac3b6b7a43a86d1fb4eb889719bbd", 0xc0, 0x0, &(0x7f0000000500)={0x2, 0x14d, {0x1, 0xc, 0x4a, "89e57fcd319056bdf50734b4160c83fc1611a5f733a8819bccade8a188f7799c025a4baf365bd08af28617322211495106f01938007b87298ce3e372f4d9fc84bec89c023ca102dedb8c", 0xf6, "62cb772d1c8cf92e3d5fbd924c4970b64d99ad50f17536c870eaea2d28747a4cbb75353529b2eb9282a08c9b0c414a2171956a472d221810c2fcd7bae9e1090c37f37a38c1eee46d2ea19294ddbb009495fad079eac4370590df1ba70578d6998b7c4d409d55abeaa37933b670e07677b89c63be9667b7035490f4f72a176342642bd743a47e088854847a76a924daecc5caf999718b697eb88bcf02779881f0df118cd997921bbb8df22e3a57c53c3f79ddd388b7a0d22096b77fa8fc8d2bfc83dc39020451de0a9ce57b4f9eedb24c8c966c9bb478dea7332a59c05a481062d3492ce1f5c939cbef68ae3cbf3b4e89cb37eefad121"}, 0xaf, "88d9c688621c385b07cf9271adf47eb565a381cff1686df87d0d857845fb1a60e3af6df5d0c8c5a0b7df30a7a34d16407d938d223098fc3c95bcef191d53acc642f16a9d7f2a2ce52d5c18516d226b7c60716977e3c91d8653994735d323e1aaf06d739b0e96f42af254fb4ec73e2d175ed5483391d16e6872d2fb1aa389b3464a30b79f3d35db29541d90fc76ed4d056bb29d817835c3e881d81066500287dbe6500d9ef18973d77bf572a179744b"}, 0x208}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x12, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743"]}]}, 0x28}}, 0x0) [ 2638.573689] FAULT_INJECTION: forcing a failure. [ 2638.573689] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.576176] CPU: 1 PID: 22970 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2638.577612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.579293] Call Trace: [ 2638.579835] dump_stack+0x107/0x167 [ 2638.580628] should_fail.cold+0x5/0xa [ 2638.581446] ? __io_queue_proc+0x262/0x5a0 [ 2638.582341] should_failslab+0x5/0x20 [ 2638.583136] kmem_cache_alloc_trace+0x55/0x320 [ 2638.584095] ? _raw_spin_unlock_irqrestore+0x38/0x40 01:41:36 executing program 6: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r2 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="46015838d58ea767bf85acf4c7ec51", 0xf, 0x200000) dup2(r3, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000040)) lseek(r2, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x20) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a340, 0x100) renameat2(r4, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file1\x00', 0x9) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x2d) sendfile(r1, r6, 0x0, 0x100000001) [ 2638.585149] __io_queue_proc+0x262/0x5a0 [ 2638.586175] ? io_poll_queue_proc+0x50/0x50 [ 2638.587057] n_tty_poll+0xba/0x8f0 [ 2638.587791] ? n_tty_ioctl+0x370/0x370 [ 2638.588605] tty_poll+0x144/0x1c0 [ 2638.589314] ? tty_release+0xe90/0xe90 [ 2638.590105] __io_arm_poll_handler+0x399/0x9e0 [ 2638.591057] __io_queue_sqe+0x52b/0x9d0 [ 2638.591882] ? io_issue_sqe+0x7700/0x7700 [ 2638.592747] ? io_poll_queue_proc+0x50/0x50 [ 2638.593636] ? io_prep_rw+0x7f5/0x1050 [ 2638.594435] io_submit_sqes+0x4461/0x85c0 [ 2638.595328] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2638.596340] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2638.597352] ? lock_downgrade+0x6d0/0x6d0 [ 2638.598192] ? find_held_lock+0x2c/0x110 [ 2638.599044] ? io_submit_sqes+0x85c0/0x85c0 [ 2638.599936] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2638.600958] ? wait_for_completion_io+0x270/0x270 [ 2638.601947] ? rcu_read_lock_any_held+0x75/0xa0 [ 2638.602895] ? vfs_write+0x354/0xa70 [ 2638.603666] ? fput_many+0x2f/0x1a0 [ 2638.604413] ? ksys_write+0x1a9/0x260 [ 2638.605197] ? __ia32_sys_read+0xb0/0xb0 [ 2638.606031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2638.607099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2638.608167] do_syscall_64+0x33/0x40 [ 2638.608931] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2638.609977] RIP: 0033:0x7fb499895b19 [ 2638.610745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2638.614489] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2638.616043] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2638.617494] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2638.618960] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2638.620427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2638.621871] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2638.689692] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:41:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5427, &(0x7f0000000040)) 01:41:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:37 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfec00000}, 0x1c) 01:41:37 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:37 executing program 0: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8ff, 0x2b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008044) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000000)={0x1000, 0xfffffffffffffff8, 0x4, 0x1}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="ea53d6954ae179434892413fbd660235c96436b25992e8bea0d7c12ea322379a03f1522955076e80324ad73d8db25ddc3ab71513f78d73e7e29a1c270e62acdcc76827e73c88200cdf9875bd26e5362429155ccfbb28a3fd29fd715e2c6c80acf948ca3cc3cd03774aa63da41e3f0e87f116cfba4001303dad9f072023c5e0104e619330af010d0ea8ddb98dd480a4c832810bdeec0f195098beb8ce69c5", 0x9e}, {&(0x7f0000000100)="59689f57e1d5f9585285c8164b38e0007808e2523449c4bda2f81df0103f82b07ad1a4f9ae149755ea3b65aeab9da44cf6678518e2dbaa10f747e8b4f52c80cfb7e44baa2945a91e738e46c65518bc3cb1df86f1710b7b7eccfbbc456cc4c3c0f9c2c3508836733821914a05929675bff0ef740f", 0x74}, {&(0x7f0000000180)}], 0x3, 0x1, 0x9) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000002600)=[{&(0x7f00000012c0)="87", 0x1}], 0x0, 0x0) 01:41:37 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r0, 0x8000000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r3, r0}}, 0xfffff801) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = inotify_init1(0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="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") ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000340)="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") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x14, 0x7, 0x2, 0x201, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40004) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000003f80)={0x31e4, 0x6, 0x9, 0x401, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x9}, [@nested={0x113c, 0xe, 0x0, 0x1, [@generic="bc3fd80cf4e96db20f76efe484b20c98aaffb332347ab5597725e8a18289318bba768b37aefe188b9aea6386ef6a394e7f97a9d82ed0ff7440fabc41b4d2b75b2f93e0cddc684c701ba547189db15ec00aed311091a97901c596116dad131370c62e79a0d8869c7866007efb579029094d28e2fbedcb328c6bd9fc843438a60dc7057052fd49584c017a4434ba7e6959eb60795767f635d146e81c5d0355089e70278d758dab505752e5346e94b3b21b4294eeaaa7b338b79e696839400d089f31ede0b3c98d1091f0dd270389a72071fa3b535f3adbe5b6a750cdb7cbff8d2d6d6dc01ad896327032bcaf7299520422", @typed={0x9, 0xa, 0x0, 0x0, @str='ext4\x00'}, @typed={0x8, 0x53, 0x0, 0x0, @u32=0x98c}, @typed={0x8, 0x7c, 0x0, 0x0, @fd}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x4f}, @typed={0x8, 0x8a, 0x0, 0x0, @fd}, @typed={0x1004, 0x8f, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x13, 0x0, 0x0, @str='(.@\x00'}]}, @generic="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", @typed={0x4, 0x77}, @nested={0x1090, 0x11, 0x0, 0x1, [@generic="f700f1a04c72b691adeb86e5ad30b4c3f1765de901ab6eadc45983a4543cec9df84877f04211201ba7543c3a15226ae57d055c8cfb1acb9ff52fbe127e5d9815f2a6e143bf64db5a5a2e3a31b0985eb8206926dfe208e55f53ebb440f18035724b2e62cd2304c34bbfd8080fd934527672a4cbee88ff7eee", @generic="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", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x20}]}]}, 0x31e4}, 0x1, 0x0, 0x0, 0x4004}, 0x44001) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x5, 0x7}, 0x7) [ 2639.082711] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2639.084800] EXT4-fs (loop3): group descriptors corrupted! [ 2639.135021] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:41:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5428, &(0x7f0000000040)) 01:41:54 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x10001) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x60000, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000400)="8aa2d51e0a1edfa91a68404d8f95b5116a966ef1f8dc7a520e0b08cb67e4d66f2687cd8650d547f9cb245efaedacaed1d58768f3b65cc1b588ba46c01f502eb49055b722fc37ac921069d3ca5e7edc5b287500"/98, 0x62, 0x3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x0, '\x00', {0x4}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x0, 0x8) sendfile(r2, r3, 0x0, 0x100000001) 01:41:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = getpgrp(0x0) pidfd_open(r0, 0x0) prlimit64(r1, 0x4, &(0x7f0000000640)={0x7f, 0x1}, &(0x7f0000000680)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697020060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dee001000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="b03ea1455899de72406a76cbb275", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf250a0000000c00028005000d0000000000200001801400030000000000000000000000000000000000060002002f00000008000600020000000c000380060004000000000008000600cd000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) unshare(0x48020200) 01:41:54 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xff000000}, 0x1c) 01:41:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:41:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:54 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2, r2}]) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r11 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x10080, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) r13 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000009c0), 0x48002, 0x0) io_submit(r3, 0xa, &(0x7f0000000c00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="0932cf64ed0acbc16db082c340be3bb9071045f279e774801f222c14d8145b8ac6ac62d08f1b55aff286a2452f4831ada14bbce366287c86d7dd3467e2ebb12abc5971e28a615d67e44d395d3b42e622d63146bd5bfcd655a32f4b0b978fbb337c0118c5990304", 0x67, 0xb09c, 0x0, 0x2, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x3d6b, 0xffffffffffffffff, &(0x7f0000000200)="edf9016b675ad0aa4dd1d4d996b0b144c9e10f29faa61651bd66148cf04da6645758251a4a3cf01f141056508e97b55adb42a357afe60a64d0becfb824ec447dea045dc3c2341835b7f97f2190dbfa9703de5c9f08603bf3ffe0b16e48ac50d6d13f29feb4e8739ec726e16321be5880ed26d15c1f33e3f812c61a7a2d941c166145f78aa5864c9215db5d0cc8e72b723e4fc9d298fb40df3dc4752ef6553192f8e63caabef2daf9316def78b53e813bca77e779e810ae1ddee502", 0xbb, 0x8, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x4, r7, &(0x7f0000000300)="5783a0f103e21f6841c5e4c9d4d1d0ddc42a17403a382333caa2b4cea10e935eb38c470a3cd4e76873ff31c70851041a9105aae8a5d29238fe1254e6a30947f21019ee598c6ae7506106a62673cfe26300958e15c14f24a05b80b77a5e053fbece6a677dc5aedb11ad846685a6da233d7ff56e50334896a98893fb105ffa45f6cf46e8b24fde524ac12199900d056e8d1ecebd3e975b968407944a382b712aeb1317a78beac3d913b3591b668f863e509d30a809ae4e51865ae8f998946bd81e24c32ee7048e07d9bad3c7ea4aef796eec5832814e004793b5b7082b56b11c3c2571e45340c20ff739197c9a7464c5ddcbe78bc311a956", 0xf7, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x101, 0xffffffffffffffff, &(0x7f0000000480)="c434698b7798fa2a3d31ad66722ceef443f31955cc0285e58f794a11af2e071eee54b3862d50cd725be635c24012b1c6cdcb3ef9c98fe345e728cdd5486ea82a665c67245550ed02467826eb9d0091d2d77a21ecdff0fd6865573d31b4d3665716019da7eedf1e1c0d83a55807fed5e4cd693f8ade5498a7e914896881d061c763b5a0ae1ac4e0d6376ba5fd49403cbfe5cc78340dfa", 0x96, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000580)="b30533db563c75f5a877fb80645dfc724b4b2307ea27a6736c9c451a1294d11a8cb69c62f6b9c8fd08e110e8569f0d7ba0cc811b9bb4faff0eda162d9b431f7bbad510ff2228917ad196e019c175226cbc85d57de4915b46b24d3804ca7ac43e6e909d0dc12da6554a0fc1cbce4022463169e6dc728196fa86b5e67f1175bb38d4eb3263ac655acf722d1ac3b3a2cab0eba73a8f73ac1ab9f9ab9a7386e9649f7f9beff705bba4540c859e2a489c0eac618a5fdf21c571b65b58c2ba7e4efce993d6a5013404bf17cb976821ed2e7037508fece5fabf1bb8f7ed69165f7688b3d9410a9a7b5b343daa64ccb4a7b98593a789", 0xf2, 0x728d, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x6, r10, &(0x7f00000006c0)="57bfebd9e0738e2f53f0f382a93df030646cf78d70d4af9262459375202ff1b63c997c146dcaa76eed4640bba4b2678fcf95e4b0bec0008a5bdc757d3f8aabe1224c190a1bc8001face0c566861feefb454941638d5a3dfb1db5dd288ed65e8db6f8a67fc76bdd20935386b45f597470c81641896c350d114b4062d5e95f27e83430636e469c6bda15c49f54d104dd51f1087d1b2b53d6745599b6f9a5a1c47344dbf23e2ad850708c17", 0xaa, 0x6}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x3, r11, &(0x7f0000000800)="504739b2c9e4ea42da1bd93a4910e9486b0d0ae3310e6d974f3399f2314078a3a6f8635da52a8967038a560ddc1b6da1642952de68680b19dd7667ac3e6e291c8aab2bd3335417d55085cdcaeddb3074dd710f340ba397297da7d2be918dedb25aecb5d2db37d4e534cb58220b9c3c45444ede19c96308d7ad694ec11bf310564930706b6c872c674646fc07b19f4b4fb87000c1c0cad0f7de68c979d7ca4d76daed8869f3cab7f4cbf72b18f5708758f703c41c45b375f6538f9770bcad8a8c791d96dd906ad528a35fe7616ccde570f7f7976edcff471aef21acdfa8925e", 0xdf}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x5f, r12, &(0x7f0000000940)="6dabc87989d74d327bf1fd07a719044701a116517cc0eb48c0ab81d84f12936e04", 0x21, 0x7f31, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x3, 0x400, r13, &(0x7f0000000a00)="1b8ff1e8f6e8781ec84e0edc66aa4195f9b46c73b3fc2f2aa3ff9abf7720eaef83ed37150b42dd2944af542210646cfe97ba2f1463c98b48b72fd8e110f7af6fa992a7c5066c09b5c4c4a6a08feb74921a4252def9a49694e697fc3c4a9a8f297ed65db11727d48551d469f9b524437ef80a6c5e8a055f2bfbcc8bee94e55c1a1d69cb5c0df0dceca66db4ced38872ca9561d7241e42694466", 0x99, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000b00)="bab8b3af9da3070977573457a357e07b69d5c978ab509f087c2ce05afe180b9fae8e097ccf57fafaef943e0ce0aff73f13b53f33645228a786c6a0f062d7651fac0c044a8e46019d98db4a05e431cc47bf3617839577cff343ffe4a7f8aa5e8a5b11cbfc30b619f64420a8413722958f3da75bfdd653b294c8a5b8ba70c86789e9b4ec5d5052", 0x86, 0x3bb}]) r14 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="008b9c0000000000000020"]) faccessat(r14, &(0x7f0000000080)='./file0\x00', 0x3) [ 2656.632962] FAULT_INJECTION: forcing a failure. [ 2656.632962] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.635512] CPU: 1 PID: 23343 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2656.636917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.638552] Call Trace: [ 2656.639100] dump_stack+0x107/0x167 [ 2656.639844] should_fail.cold+0x5/0xa [ 2656.640639] ? create_object.isra.0+0x3a/0xa20 [ 2656.641556] should_failslab+0x5/0x20 [ 2656.642332] kmem_cache_alloc+0x5b/0x310 [ 2656.643154] create_object.isra.0+0x3a/0xa20 [ 2656.644055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.645086] kmem_cache_alloc_trace+0x151/0x320 [ 2656.646051] __io_queue_proc+0x262/0x5a0 [ 2656.646864] ? io_poll_queue_proc+0x50/0x50 [ 2656.647740] n_tty_poll+0xba/0x8f0 [ 2656.648445] ? n_tty_ioctl+0x370/0x370 [ 2656.649254] tty_poll+0x144/0x1c0 [ 2656.649958] ? tty_release+0xe90/0xe90 [ 2656.650756] __io_arm_poll_handler+0x399/0x9e0 [ 2656.651678] __io_queue_sqe+0x52b/0x9d0 [ 2656.652501] ? io_issue_sqe+0x7700/0x7700 [ 2656.653323] ? io_poll_queue_proc+0x50/0x50 [ 2656.654209] ? io_prep_rw+0x7f5/0x1050 [ 2656.654989] io_submit_sqes+0x4461/0x85c0 [ 2656.655889] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2656.656892] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2656.657892] ? lock_downgrade+0x6d0/0x6d0 [ 2656.658714] ? find_held_lock+0x2c/0x110 [ 2656.659547] ? io_submit_sqes+0x85c0/0x85c0 [ 2656.660413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2656.661408] ? wait_for_completion_io+0x270/0x270 [ 2656.662365] ? rcu_read_lock_any_held+0x75/0xa0 [ 2656.663316] ? vfs_write+0x354/0xa70 [ 2656.664061] ? fput_many+0x2f/0x1a0 [ 2656.664814] ? ksys_write+0x1a9/0x260 [ 2656.665597] ? __ia32_sys_read+0xb0/0xb0 [ 2656.666411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2656.667482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2656.668518] do_syscall_64+0x33/0x40 [ 2656.669288] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2656.670298] RIP: 0033:0x7fb499895b19 [ 2656.671058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.674686] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2656.676242] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2656.677699] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2656.679152] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2656.680603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2656.682078] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2656.693346] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 2656.695425] EXT4-fs (loop3): group descriptors corrupted! 01:41:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5429, &(0x7f0000000040)) [ 2656.717176] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2656.760311] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 01:41:55 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xff0f0000}, 0x1c) 01:41:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:41:55 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:41:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5437, &(0x7f0000000040)) 01:41:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc8001, 0x141) fcntl$getown(r1, 0x9) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf05, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3ff9691c7560"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="06743a5e15ad"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f52671c69617"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="05ae1dfb5651"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/187) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/107) 01:41:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x537e02) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000005c0)={0x0, 0x4, 0x1, 0x1, 0x0, [0x400, 0x2, 0x9, 0x8000]}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r3, @ANYBLOB=',\x00']) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f00000006c0)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r4, @ANYBLOB="2c0075574b5870c54b58d82949764710a7726c5422f76ae594a63e3c9d85b4bc212faa7926f69b6cef9c7b966da71cb519c0f558a8b7509963eb6a6605981c1c59a0e75494c1d24beda2"]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}, {0x2, 0x5, r5}, {0x2, 0x0, r3}, {0x2, 0x2, r3}, {0x2, 0x0, r6}, {0x2, 0x2, r3}, {0x2, 0x1, r3}, {0x2, 0x2, r3}, {0x2, 0x2, r3}], {0x4, 0x1}, [{0x8, 0x2, r7}], {}, {0x20, 0x6}}, 0x74, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20020, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r3}}, {@fowner_gt={'fowner>', r8}}, {@audit}, {@dont_hash}]}}) 01:41:55 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xffffff91}, 0x1c) [ 2657.183292] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2657.323913] cgroup: Unknown subsys name 'releaseWagent' [ 2657.350056] cgroup: Unknown subsys name 'releaseWagent' [ 2657.399078] cgroup: Unknown subsys name 'releaseWagent' [ 2657.400815] cgroup: Unknown subsys name 'releaseWagent' 01:42:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = clone3(&(0x7f0000000600)={0x3060180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600002, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x7f, 0x2, 0x9, 0x0, 0xffffffffffff4f96, 0x10200, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0xf8b, 0x1ff, 0x2, 0x7e75, 0x61a4, 0xffff, 0x0, 0x1, 0x0, 0x3}, r0, 0x7, r1, 0x3) 01:42:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:42:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:42:14 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5441, &(0x7f0000000040)) 01:42:14 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffff5}, 0x1c) 01:42:14 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5e, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xc3, 0x20}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe}, 0xc) dup2(r1, r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000cb4000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c91000/0x2000)=nil, &(0x7f0000000140)="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", 0xfe, r2}, 0x68) 01:42:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x36, 0x8, 0x1, 0x0, 0x9, 0x185, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xcb6, 0x3, @perf_bp={&(0x7f0000000000), 0x4}, 0xb000, 0x10001, 0x0, 0x4, 0x4, 0x3f, 0x401, 0x0, 0x7ff, 0x0, 0x1}, r1, 0x7, r0, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) [ 2676.454679] FAULT_INJECTION: forcing a failure. [ 2676.454679] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.457486] CPU: 1 PID: 23687 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2676.458875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.460508] Call Trace: [ 2676.461061] dump_stack+0x107/0x167 [ 2676.461790] should_fail.cold+0x5/0xa [ 2676.462560] ? __io_queue_proc+0x262/0x5a0 [ 2676.463406] should_failslab+0x5/0x20 [ 2676.464164] kmem_cache_alloc_trace+0x55/0x320 [ 2676.465091] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2676.466103] __io_queue_proc+0x262/0x5a0 [ 2676.466918] ? io_poll_queue_proc+0x50/0x50 [ 2676.467775] n_tty_poll+0xba/0x8f0 [ 2676.468500] ? n_tty_ioctl+0x370/0x370 [ 2676.469288] tty_poll+0x144/0x1c0 [ 2676.469999] ? tty_release+0xe90/0xe90 [ 2676.470794] __io_arm_poll_handler+0x399/0x9e0 [ 2676.471742] __io_queue_sqe+0x52b/0x9d0 [ 2676.472560] ? io_issue_sqe+0x7700/0x7700 [ 2676.473422] ? io_poll_queue_proc+0x50/0x50 [ 2676.474303] ? io_prep_rw+0x7f5/0x1050 [ 2676.475103] io_submit_sqes+0x4461/0x85c0 [ 2676.475985] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2676.477005] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2676.477991] ? lock_downgrade+0x6d0/0x6d0 [ 2676.478829] ? find_held_lock+0x2c/0x110 [ 2676.479659] ? io_submit_sqes+0x85c0/0x85c0 [ 2676.480543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2676.481541] ? wait_for_completion_io+0x270/0x270 [ 2676.482525] ? rcu_read_lock_any_held+0x75/0xa0 [ 2676.483470] ? vfs_write+0x354/0xa70 [ 2676.484233] ? fput_many+0x2f/0x1a0 [ 2676.484982] ? ksys_write+0x1a9/0x260 [ 2676.485759] ? __ia32_sys_read+0xb0/0xb0 [ 2676.486591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2676.487652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2676.488707] do_syscall_64+0x33/0x40 [ 2676.489471] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2676.490511] RIP: 0033:0x7fb499895b19 [ 2676.491270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.495005] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2676.496549] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2676.498012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2676.499483] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2676.500957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2676.502426] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2676.585635] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:42:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x544f, &(0x7f0000000040)) 01:42:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tipc={{0x18, 0x4, 0x3, 0x3d, 0x8c, 0x67, 0x0, 0x1, 0x6, 0x0, @private=0xa010100, @loopback, {[@timestamp={0x44, 0x18, 0x7f, 0x0, 0x3, [0xe32, 0x4, 0x100, 0x10001, 0x400]}, @generic={0x7, 0xe, "4239fa9cacd2e6d736fbc408"}, @timestamp_prespec={0x44, 0x24, 0xcb, 0x3, 0x9, [{@rand_addr=0x64010100, 0x200}, {@broadcast, 0x3f}, {@remote, 0xe45d}, {@multicast2, 0xeb686f7d}]}]}}, @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x1, 0xa, 0x2, 0x2, 0x24a, 0x0, 0x0, 0xa, 0x0, 0x2, 0x1ff, 0x4, 0x0, 0x4e21, 0x4e21}, 0x4, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008000000030005000305809b06080004aaaaaaaaaaaa1115b84e8ea49771aaaaaaaaaa34eb3c25aba3071b3be1a70c17f1c11b519eec5464ecb0b8803f413ca1a0ff4ad1caeaaae0e8c3c75f2878ed467bbb1d8ab68032cb1f287c016a94abd70e89f164a6ce90b4c4fdba448d3351cb3017da07b4850ee2b005ee6c2ebc664727ce52b17392dca7a617ee6b7bd5"], 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x100}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x41810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000), 0x9) r2 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r2, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x86, 0x80, 0x1f, 0x80, 0x0, 0xb5, 0x11000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x4014, 0x9, 0xffff9855, 0x9, 0x5, 0x22f4, 0x20, 0x0, 0xf, 0x0, 0x7f}, r2, 0x3, 0xffffffffffffffff, 0x9) 01:42:15 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:15 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x17) 01:42:15 executing program 6: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) pread64(r0, &(0x7f0000000280)=""/178, 0xb2, 0x9028) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x10b6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de6", 0x97, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa000) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r2) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, r2) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000140)) 01:42:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) [ 2676.801624] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 01:42:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5450, &(0x7f0000000040)) 01:42:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000180)=0x2, 0x0, 0x6) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3c196920d8b85fc5, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000100)=0x100, 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000240)={0x0, "138ac565cf4a0e3b48d22de53872bd77"}) 01:42:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:42:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2000000000000002}, 0xc05, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30}, {0x6}]}, 0x10) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f0000000200)='system_u:object_r:default_t:s0\x00', 0x1f, 0x3) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0x7f, 0x40, 0x80000000}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0/../file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000001e00)={{r5}, "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"}) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 01:42:15 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x2000001c) [ 2677.050356] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2677.184822] FAULT_INJECTION: forcing a failure. [ 2677.184822] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.187506] CPU: 1 PID: 23844 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2677.188925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2677.190604] Call Trace: [ 2677.191147] dump_stack+0x107/0x167 [ 2677.192025] should_fail.cold+0x5/0xa [ 2677.192853] ? create_object.isra.0+0x3a/0xa20 [ 2677.193952] should_failslab+0x5/0x20 [ 2677.194724] kmem_cache_alloc+0x5b/0x310 [ 2677.195558] create_object.isra.0+0x3a/0xa20 [ 2677.196453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2677.197497] kmem_cache_alloc_trace+0x151/0x320 [ 2677.198452] __io_queue_proc+0x262/0x5a0 [ 2677.199382] ? io_poll_queue_proc+0x50/0x50 [ 2677.200257] n_tty_poll+0xba/0x8f0 [ 2677.201143] ? n_tty_ioctl+0x370/0x370 [ 2677.201995] tty_poll+0x144/0x1c0 [ 2677.202756] ? tty_release+0xe90/0xe90 [ 2677.203671] __io_arm_poll_handler+0x399/0x9e0 [ 2677.204763] __io_queue_sqe+0x52b/0x9d0 [ 2677.205610] ? io_issue_sqe+0x7700/0x7700 [ 2677.206569] ? io_poll_queue_proc+0x50/0x50 [ 2677.207612] ? io_prep_rw+0x7f5/0x1050 [ 2677.208430] io_submit_sqes+0x4461/0x85c0 [ 2677.209487] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2677.210641] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2677.211720] ? lock_downgrade+0x6d0/0x6d0 [ 2677.212752] ? find_held_lock+0x2c/0x110 [ 2677.213591] ? io_submit_sqes+0x85c0/0x85c0 [ 2677.214575] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2677.215781] ? wait_for_completion_io+0x270/0x270 [ 2677.216854] ? rcu_read_lock_any_held+0x75/0xa0 [ 2677.217990] ? vfs_write+0x354/0xa70 [ 2677.218816] ? fput_many+0x2f/0x1a0 [ 2677.219672] ? ksys_write+0x1a9/0x260 [ 2677.220542] ? __ia32_sys_read+0xb0/0xb0 [ 2677.221509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2677.222686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2677.223844] do_syscall_64+0x33/0x40 [ 2677.224704] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2677.225788] RIP: 0033:0x7fb499895b19 [ 2677.226672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2677.230853] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2677.232556] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2677.234130] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2677.235817] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2677.237346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2677.238989] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2677.334591] kauditd_printk_skb: 59 callbacks suppressed [ 2677.334609] audit: type=1400 audit(1705023735.737:245): avc: denied { relabelto } for pid=23840 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=50645 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=netlink_xfrm_socket permissive=1 01:42:31 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x17) 01:42:31 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) fsync(0xffffffffffffffff) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = gettid() pidfd_open(r2, 0x0) prlimit64(0x0, 0x1, &(0x7f00000015c0)={0x0, 0x3}, &(0x7f0000001600)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x7, 0x0, 0x400, 0x0, 0x5, "020d413cc96c2d23ccc5963c1b539e66b59a9f", 0x7}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) readv(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) readv(r0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x7f8, 0x9089}}) write(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/auth_rpcgss', 0x200, 0x0) unshare(0x48020200) 01:42:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:42:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:42:31 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x78) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xa0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0x3f, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:42:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 01:42:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5451, &(0x7f0000000040)) [ 2692.842723] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2692.895834] FAULT_INJECTION: forcing a failure. [ 2692.895834] name failslab, interval 1, probability 0, space 0, times 0 [ 2692.898616] CPU: 1 PID: 23961 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2692.900111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.901815] Call Trace: [ 2692.902358] dump_stack+0x107/0x167 [ 2692.903106] should_fail.cold+0x5/0xa [ 2692.903888] ? __io_queue_proc+0x262/0x5a0 [ 2692.904750] should_failslab+0x5/0x20 [ 2692.905529] kmem_cache_alloc_trace+0x55/0x320 [ 2692.906458] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2692.907497] __io_queue_proc+0x262/0x5a0 [ 2692.908324] ? io_poll_queue_proc+0x50/0x50 [ 2692.909247] n_tty_poll+0xba/0x8f0 [ 2692.909975] ? n_tty_ioctl+0x370/0x370 [ 2692.910766] tty_poll+0x144/0x1c0 [ 2692.911473] ? tty_release+0xe90/0xe90 [ 2692.912261] __io_arm_poll_handler+0x399/0x9e0 [ 2692.913224] __io_queue_sqe+0x52b/0x9d0 [ 2692.914040] ? io_issue_sqe+0x7700/0x7700 [ 2692.914877] ? io_poll_queue_proc+0x50/0x50 [ 2692.915765] ? io_prep_rw+0x7f5/0x1050 [ 2692.916565] io_submit_sqes+0x4461/0x85c0 [ 2692.917457] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2692.918467] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2692.919454] ? lock_downgrade+0x6d0/0x6d0 [ 2692.920289] ? find_held_lock+0x2c/0x110 [ 2692.921131] ? io_submit_sqes+0x85c0/0x85c0 [ 2692.922017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2692.922998] ? wait_for_completion_io+0x270/0x270 [ 2692.923978] ? rcu_read_lock_any_held+0x75/0xa0 [ 2692.924917] ? vfs_write+0x354/0xa70 [ 2692.925697] ? fput_many+0x2f/0x1a0 [ 2692.926451] ? ksys_write+0x1a9/0x260 [ 2692.927231] ? __ia32_sys_read+0xb0/0xb0 [ 2692.928067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2692.929146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2692.930197] do_syscall_64+0x33/0x40 [ 2692.930946] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2692.931982] RIP: 0033:0x7fb499895b19 [ 2692.932743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.936492] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2692.938070] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2692.939509] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2692.940958] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2692.942413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2692.943858] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:42:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5452, &(0x7f0000000040)) 01:42:47 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x80240, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 01:42:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:42:47 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:47 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa09}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x56d2f1a59fc50d7a, 0x80, 0x0, 0xfa, 0x0, 0xe0, 0x0, 0xff, 0x80, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa0000000, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4081, 0xf8, 0x30, 0x6, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x4ce23000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6(0xa, 0x800, 0x81) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000340)={{r4}, 0x0, 0x4, @inherit={0x60, &(0x7f00000002c0)={0x0, 0x3, 0x401, 0x1, {0x1d, 0x0, 0x9, 0x9, 0x10001}, [0x9, 0x1ff, 0x2]}}, @subvolid=0x8}) accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:42:47 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x75) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20000, 0x78) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "a66cb98e93196a8dc998d8ebfe459ed0"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000005) 01:42:47 executing program 6: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0x4, 0xd}]}, 0x2c}}, 0x0) [ 2708.775706] netlink: 'syz-executor.6': attribute type 13 has an invalid length. [ 2708.783719] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2708.816669] FAULT_INJECTION: forcing a failure. [ 2708.816669] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.819475] CPU: 0 PID: 24091 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2708.820915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2708.822605] Call Trace: [ 2708.823157] dump_stack+0x107/0x167 [ 2708.823911] should_fail.cold+0x5/0xa [ 2708.824701] ? create_object.isra.0+0x3a/0xa20 [ 2708.825668] should_failslab+0x5/0x20 [ 2708.826479] kmem_cache_alloc+0x5b/0x310 [ 2708.827316] create_object.isra.0+0x3a/0xa20 [ 2708.828237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2708.829309] kmem_cache_alloc_trace+0x151/0x320 [ 2708.830286] __io_queue_proc+0x262/0x5a0 [ 2708.831115] ? io_poll_queue_proc+0x50/0x50 [ 2708.831993] n_tty_poll+0xba/0x8f0 [ 2708.832735] ? n_tty_ioctl+0x370/0x370 [ 2708.833539] tty_poll+0x144/0x1c0 [ 2708.834276] ? tty_release+0xe90/0xe90 [ 2708.835057] __io_arm_poll_handler+0x399/0x9e0 [ 2708.836029] __io_queue_sqe+0x52b/0x9d0 [ 2708.836845] ? io_issue_sqe+0x7700/0x7700 [ 2708.837723] ? io_poll_queue_proc+0x50/0x50 [ 2708.838596] ? io_prep_rw+0x7f5/0x1050 [ 2708.839417] io_submit_sqes+0x4461/0x85c0 [ 2708.840301] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2708.841360] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2708.842344] ? lock_downgrade+0x6d0/0x6d0 [ 2708.843204] ? find_held_lock+0x2c/0x110 [ 2708.844031] ? io_submit_sqes+0x85c0/0x85c0 [ 2708.844942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2708.845934] ? wait_for_completion_io+0x270/0x270 [ 2708.846948] ? rcu_read_lock_any_held+0x75/0xa0 [ 2708.847890] ? vfs_write+0x354/0xa70 [ 2708.848672] ? fput_many+0x2f/0x1a0 [ 2708.849432] ? ksys_write+0x1a9/0x260 [ 2708.850227] ? __ia32_sys_read+0xb0/0xb0 [ 2708.851063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2708.852157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2708.853213] do_syscall_64+0x33/0x40 [ 2708.853995] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2708.855030] RIP: 0033:0x7fb499895b19 [ 2708.855806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2708.859525] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2708.861104] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2708.862557] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2708.864046] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2708.865486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2708.866981] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:42:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x545d, &(0x7f0000000040)) 01:42:47 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:42:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x512b, &(0x7f00000002c0), &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) io_uring_enter(r1, 0x1058a8, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) 01:42:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) [ 2709.182023] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:42:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5460, &(0x7f0000000040)) [ 2709.230598] FAULT_INJECTION: forcing a failure. [ 2709.230598] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.232520] CPU: 0 PID: 24226 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2709.233635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.234949] Call Trace: [ 2709.235376] dump_stack+0x107/0x167 [ 2709.235966] should_fail.cold+0x5/0xa [ 2709.236569] ? __io_queue_proc+0x262/0x5a0 [ 2709.237247] should_failslab+0x5/0x20 [ 2709.237875] kmem_cache_alloc_trace+0x55/0x320 [ 2709.238589] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2709.239389] __io_queue_proc+0x262/0x5a0 [ 2709.240022] ? io_poll_queue_proc+0x50/0x50 [ 2709.240852] n_tty_poll+0xba/0x8f0 [ 2709.241923] ? n_tty_ioctl+0x370/0x370 [ 2709.243001] tty_poll+0x144/0x1c0 [ 2709.243957] ? tty_release+0xe90/0xe90 [ 2709.245008] __io_arm_poll_handler+0x399/0x9e0 [ 2709.246289] __io_queue_sqe+0x52b/0x9d0 [ 2709.247616] ? io_issue_sqe+0x7700/0x7700 [ 2709.249012] ? io_poll_queue_proc+0x50/0x50 [ 2709.250415] ? io_prep_rw+0x7f5/0x1050 [ 2709.251562] io_submit_sqes+0x4461/0x85c0 [ 2709.252637] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2709.253818] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2709.254973] ? lock_downgrade+0x6d0/0x6d0 [ 2709.255943] ? find_held_lock+0x2c/0x110 [ 2709.256905] ? io_submit_sqes+0x85c0/0x85c0 [ 2709.257944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2709.259092] ? wait_for_completion_io+0x270/0x270 [ 2709.260224] ? rcu_read_lock_any_held+0x75/0xa0 [ 2709.261341] ? vfs_write+0x354/0xa70 [ 2709.262218] ? fput_many+0x2f/0x1a0 [ 2709.263080] ? ksys_write+0x1a9/0x260 [ 2709.263986] ? __ia32_sys_read+0xb0/0xb0 [ 2709.264947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.266180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.267394] do_syscall_64+0x33/0x40 [ 2709.268275] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2709.269501] RIP: 0033:0x7fb499895b19 [ 2709.270393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.274894] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2709.276674] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2709.278373] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2709.280050] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.280063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2709.280076] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:42:47 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xfd, 0x7, 0x5, 0x4, 0x0, 0x8001, 0x4044, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100)}, 0x19080, 0xfffffffffffffffc, 0x5, 0x7, 0x9d76, 0x8, 0x2, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0x9, r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4800, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000240)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000400)={0x550, 0x36, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa}, [@nested={0x13e, 0x68, 0x0, 0x1, [@generic="7c4f161008f9e2d0cd90a30d344c3dbce9041e439f19e6d8d654825e7e5a090e64e3108deac2c8d27e439f9f60a1ea099cc03666be450ec43259433177c26063ec6fd6e41ec3f40b720941fbdd9e1ca18816ab919a1c997f38c93b0168439f0da7860dffe0b92b91cad02d679971ed3f6cb2adcb1e305c36aaafd4c561ebf371bb4638", @typed={0x83, 0x16, 0x0, 0x0, @binary="e37381d4660e9441a2ba5d8627c0f4b21cf6f606be18860197c7eed97a970c1b89c31f169405c37070b03da3f7826550bbda269d1a05ee8a6b48bb38755ffa36cb2cce6b31cfe96cfb89a5bdd485d6e6d805bb0e42229b4324b207d7caa7333dd4dcdbcfb0bc9e7c3fafa4593c7267fbbedeb9b8603dca0004b15c41a7ba02"}, @generic="0741c1a6f39b95e1ad87627c99cc4f6370e46050074863f4cbc939b5f1b0e8f90d5e74c2c2535231dd7df3c35f77f0de751b84"]}, @nested={0x20, 0x5e, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @uid=r5}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@local}]}, @nested={0xa8, 0x63, 0x0, 0x1, [@generic="ae3ab00657915443034247d5c71075f52cdfd69cc1afa2be9a1f989b0a9342fedaea8c890699fd2be56dc58a88c9f2fe7f60136007072785dc374c24efe4472a8ccdb2ae97b603a4cf31", @generic="6d969b2cfb689878b44ce89d3cd65e85acf9a1d158324bb9163edfd14d0e05ee34fe7226f915e604bd26443fe7db", @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@private0}, @typed={0x4, 0x40}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xc, 0x7f, 0x0, 0x0, @str='batadv0\x00'}]}, @generic="39ceb1360ef5c2ddabdd92a967f3811f25905a98f375ce5000ade4691af7f93ae0628fe56d566d7ffe165f725f430aada6359604a038812f063a7115942111b97a56283a340946814c70b9851ececa4b9cc7", @typed={0xc, 0x92, 0x0, 0x0, @str='batadv0\x00'}, @typed={0xa4, 0x62, 0x0, 0x0, @binary="e984e8ea6c42312ac8fb13d45efc75095eb02d2b3191643dd134b0fdae0fe2550371c5a8cfafb3420f65188b549ca2ef6a013a8fa93b3212d30f5d31887a7ca3ff5feadf33e3810518596959298eb25314062cbd8557b4fac93bc24c2cf54715991fdf3328164a21c7ae8dda5d50edf107320176e4773ed902aebb1259da0c62879c337af3b6466d0cc7770dc942350f4d203fa3dc46bf828cbddb7b86b61c02"}, @generic="23ae7a756c39e47dfd384c109aea299a74bbbb72071f55f1681d5011544d7a47018344", @nested={0x209, 0x8f, 0x0, 0x1, [@generic="d305cd01f867738294fce0a6f719e73018488f84cc90c471e231a7c4dfc7a40c5c248d1591ac8ec6516938c3fdd463b8c479459592ea61e897f1912502badd30cf40f9848ecad4f2195b9a27e98c14f9d6e7b53333d3c6341e96932c043d21cb006004f64651aced526511981b49d8d65159def1acf2a8f83b1cbc7b7eeaec73e5cce1acea851ff3e1f381b1d3741a8cc58d7e39d70187e63b103c72a266d18dcadf19eef0f9834509cae6881d039b9aee98c427773e85199805d3ad33e0ce7f3309f5253f59d67cfcfd41a835473526", @generic="03c2749914e975b221db9cc75c7555b25cdc5a9cf1f90719ff6ad98817a05dde4ff0f7e40926fb6bc12d2fc0e6e1e07bfe531ee1c908dc8acfb3eb6f74e0b0384e690cf26bc0dc9ba91ca00906a26b815e36039eb933c0dc8456882f988e7b491d6f299f0395a26ae6a766ef5a", @typed={0x9, 0x71, 0x0, 0x0, @str='#:-,\x00'}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @typed={0x39, 0x25, 0x0, 0x0, @binary="180fa4f2ba4a90ab88b97a8213a9d8e5bda50066d458b517f6a9a8fd5a7def57fddf6201a04b1d29ca506e87fe36f61e653fe3670f"}, @typed={0x55, 0x11, 0x0, 0x0, @binary="8a579345d521ab9737d5700e9414a9d30d1dbf0263b40e0d7fa8b2000bae5155af6104bb7e5c94363f84c1c509308b4b40bad0f073bf767a0a6935fa42e7f821316b506d8ede37e0fdab093de4335ef35e"}, @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 01:42:47 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:42:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:42:47 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) kcmp(0xffffffffffffffff, 0x0, 0x0, r1, r0) r2 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x80000, 0x100) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r2) fsync(r5) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001c40)={0x0, 0x7}, 0x4) fsetxattr$security_capability(r4, &(0x7f00000000c0), &(0x7f00000001c0)=@v1={0x1000000, [{0xa1, 0x9}]}, 0xc, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x4a100, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat(r6, &(0x7f0000000240)='./file0\x00', 0x1, 0x5c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) pwrite64(r3, &(0x7f0000000140)="0e", 0x1, 0x0) 01:42:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:42:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5600, &(0x7f0000000040)) 01:42:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xc05, 0x80, 0xfcf, 0xffff, 0x800}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x55bacd4f7aaddb8e, 0x0) r5 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000fbdf250c0000000800311001000006773f000000000000003a9d26a1c3d37aab4e8780acd73cd61ef547aa140c3ede5b9cc6925b84778decec811cd32db85a776cd11492f2dc771da897f6a9f230d24805d1edf2493335bf908c9affd01602631da73b20963ee46b65b8a7ad8398b67a187c55b3075195910ad20c3eb7574ad659e3c209"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x901}, 0x8004) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6c}, {0x6, 0x0, 0x0, 0x7e}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$netlink(0x10, 0x3, 0x15) [ 2709.604400] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2709.618528] FAULT_INJECTION: forcing a failure. [ 2709.618528] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.620526] CPU: 1 PID: 24373 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2709.621784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.623262] Call Trace: [ 2709.623787] dump_stack+0x107/0x167 [ 2709.624368] should_fail.cold+0x5/0xa [ 2709.625059] ? create_object.isra.0+0x3a/0xa20 [ 2709.625992] should_failslab+0x5/0x20 [ 2709.626588] kmem_cache_alloc+0x5b/0x310 [ 2709.627300] create_object.isra.0+0x3a/0xa20 [ 2709.628134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2709.629028] kmem_cache_alloc_trace+0x151/0x320 [ 2709.629938] __io_queue_proc+0x262/0x5a0 [ 2709.630746] ? io_poll_queue_proc+0x50/0x50 [ 2709.631421] n_tty_poll+0xba/0x8f0 [ 2709.632086] ? n_tty_ioctl+0x370/0x370 [ 2709.632825] tty_poll+0x144/0x1c0 [ 2709.633439] ? tty_release+0xe90/0xe90 [ 2709.634173] __io_arm_poll_handler+0x399/0x9e0 [ 2709.635050] __io_queue_sqe+0x52b/0x9d0 [ 2709.635732] ? io_issue_sqe+0x7700/0x7700 [ 2709.636446] ? io_poll_queue_proc+0x50/0x50 [ 2709.637282] ? io_prep_rw+0x7f5/0x1050 [ 2709.638066] io_submit_sqes+0x4461/0x85c0 [ 2709.638769] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2709.639597] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2709.640436] ? io_submit_sqes+0x85c0/0x85c0 [ 2709.641238] ? recalibrate_cpu_khz+0x10/0x10 [ 2709.642123] ? ktime_get+0x158/0x1f0 [ 2709.642755] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2709.643483] ? clockevents_program_event+0x131/0x360 [ 2709.644411] ? tick_program_event+0xa8/0x140 [ 2709.645291] ? hrtimer_interrupt+0x60f/0x9b0 [ 2709.646074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.646946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.647799] do_syscall_64+0x33/0x40 [ 2709.648398] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2709.649246] RIP: 0033:0x7fb499895b19 [ 2709.649986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.653168] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2709.654361] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2709.655651] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2709.656966] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.658238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2709.659337] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:03 executing program 6: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r0, 0x8000000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r4, r0}}, 0xfffff801) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) syz_io_uring_submit(r2, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1, {0x0, r4}}, 0x1f) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200681, 0x104) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="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") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x14, 0x7, 0x2, 0x201, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40004) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x5, 0x7}, 0x7) 01:43:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x85310000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{}, 0x1, 0x0, 0x2}) openat(r0, &(0x7f0000000140)='./file1\x00', 0xc2002, 0x8c) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x3, 0x4005, 0x9, 0xb31f, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{}, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) dup2(r2, r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 01:43:03 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x400000) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x41}, 0x401, 0x6a6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x170d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5601, &(0x7f0000000040)) 01:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:43:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xb, 0x7) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @private=0xa010102}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r2}, 0x18, 0x0) clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000040)=0x0, {0x31}, &(0x7f0000000200)=""/5, 0x5, &(0x7f0000000300)=""/237, &(0x7f0000000480)=[0x0, 0x0], 0x2}, 0x58) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x18e8, 0x1, 0x2, 0x6, 0x6, 0x5b7, 0xff, 0x0, 0x7, 0x0, 0x8}, r3, 0x2, r0, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1e02, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r5 = socket$inet(0x2, 0x3, 0x80) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4) sendmmsg$inet(r5, &(0x7f0000000000), 0x400000d, 0x0) dup2(0xffffffffffffffff, r5) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$CDROMRESET(r4, 0x5329) unshare(0x48020200) [ 2724.819484] FAULT_INJECTION: forcing a failure. [ 2724.819484] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.822419] CPU: 0 PID: 24575 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2724.823840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.825546] Call Trace: [ 2724.826091] dump_stack+0x107/0x167 [ 2724.826843] should_fail.cold+0x5/0xa [ 2724.827630] ? __io_queue_proc+0x262/0x5a0 [ 2724.828506] should_failslab+0x5/0x20 [ 2724.829287] kmem_cache_alloc_trace+0x55/0x320 [ 2724.830241] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2724.831286] __io_queue_proc+0x262/0x5a0 [ 2724.832126] ? io_poll_queue_proc+0x50/0x50 [ 2724.833010] n_tty_poll+0xba/0x8f0 [ 2724.833769] ? n_tty_ioctl+0x370/0x370 [ 2724.834574] tty_poll+0x144/0x1c0 [ 2724.835306] ? tty_release+0xe90/0xe90 [ 2724.836100] __io_arm_poll_handler+0x399/0x9e0 [ 2724.837072] __io_queue_sqe+0x52b/0x9d0 [ 2724.837906] ? io_issue_sqe+0x7700/0x7700 [ 2724.838793] ? io_poll_queue_proc+0x50/0x50 [ 2724.839686] ? io_prep_rw+0x7f5/0x1050 [ 2724.840502] io_submit_sqes+0x4461/0x85c0 [ 2724.841386] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.842432] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2724.843435] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2724.844369] ? io_submit_sqes+0x85c0/0x85c0 [ 2724.845254] ? finish_task_switch+0x1a4/0x5d0 [ 2724.846201] ? __switch_to+0x572/0xf70 [ 2724.846992] ? __switch_to_asm+0x3a/0x60 [ 2724.847837] ? __switch_to_asm+0x34/0x60 [ 2724.848682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.849766] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2724.850887] ? trace_hardirqs_on+0x5b/0x180 [ 2724.851774] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2724.852915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.853998] do_syscall_64+0x33/0x40 [ 2724.854777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2724.855828] RIP: 0033:0x7fb499895b19 [ 2724.856606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.860384] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2724.861982] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2724.863488] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2724.865225] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2724.866812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.868337] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c0000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5602, &(0x7f0000000040)) 01:43:03 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x3}}, './file0\x00'}) sendfile(r3, r1, &(0x7f0000000340)=0x1f3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x8, 0xffff, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x8, 0x1ff, 0x9}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c700368", @ANYRES16=r5, @ANYBLOB="000225bd7000fcdbdf2509000000540001801400020076657468315f746f5f7465616d00000008000300010000000800030000000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x44010}, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, 0x10c000}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) [ 2724.892790] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:43:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000040)) 01:43:03 executing program 6: r0 = getpgrp(0x0) r1 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = pidfd_open(r1, 0x0) setpriority(0x3, 0x0, 0xff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x6) r3 = pidfd_open(r0, 0x0) r4 = dup(r3) setns(r4, 0x0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000000c0)=0x843) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r5) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x2d47, &(0x7f0000000000)) 01:43:03 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2725.171734] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 01:43:21 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) setpriority(0x0, 0x0, 0x200) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) close(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='P-mmit=0x0000000000000010,\x00']) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000204) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x1) 01:43:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7", 0x31, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) openat$random(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r1, r0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1000, 0x1, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/51, 0x33, 0x101) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) 01:43:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5605, &(0x7f0000000040)) 01:43:21 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0020000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:21 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) openat(0xffffffffffffffff, 0x0, 0x0, 0x20) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001e00)={{r1, 0x101, 0x10001, 0x8, 0x9, 0x5, 0x800, 0x3, 0x80, 0x4, 0x8000, 0x3, 0x100000000, 0x662129e1, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002e00)={r0, r5, "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", "a46a57dbd427d3be265f8de8b857f880976f18a884308a0bf92472e3781f513c5412f621b0f29532e3873dd8f8e05eff0793da0b3d019d48342e6cca435b7e4f1176c217eec5b6a34c6b48c4c6db9a9193c40c1697a1871b1187b74614fd7637f85e25aa16544753a67a0093a521f73ea581a95a54955b3f3eea5937b0360ab767996d2fac8655cd5358a366ff48def12b586581a41d886edd62c4dd6280ba5353036f3d8369a1b2fc1d41cd33ec9c9b8b2e8de277ae86ee4b7695015e902f7cac4f8a46630b4654541446f4149d701f33e6249671357a4e996c1dc4481f6b4348d706e9cb3298f6452dd8e231fc54cba9726bfa9d08630b81515269b71ec078244175da12f8b3b00ca9acb8a97cfd855919edc1344ee3413dbfd49b2da3a20eb9cc35ac00a431b7325efb7e4743fc4d98d3f5516065068b67cc758da243dd2790d5bc2a937e6eb4e68b4878226c916867f7918619b7182c5b0544951788f5bb04ceb51c619f6b48eddd7420ae0fc31aa76e24e2bd5e6d5e4ac7932b8f65be9ae543051b3cfdd463f482590a4a19012001850bbceaa41984528d96eab2988f328e30b6a2afe9104b790756494e9137ec9a60ddf5ba06f0ed93904e90d1f00e32649a7366b93143bb760f2b53d7ae182a408d278ccddfedb055ce61bacb88630411882705ab79ecae6c1485f921cb428146d45dd8e411e7c96fcbcb4b2e5701bb963b65e898a5e5f8597430dddb3e19b219b1e8371236db720e3f1287f107425bd364f5ee12b9b32d52f237be67ffe960a9c2684acc6814fff222845601a177f19bce7d71de792204246da279d5e35fa12ef1485c7e68db1b96afd45899dc3236d3bed265aeec753e8ce8eefcec0f098d2a1d763a4cecab656d5fc1ed40004b182d9d90d5d5539050e688a08b0bee64c62dbf4f421cda450892614c9d66c8681296c39dfa82a14866ef9b525cc54d2922f79a464e43370522d3314e6a46c5c92f4abf0bf349025a97689323f3b2c82fb3b30df5c8fb147081a5cf47dc89e2657fc4aebdd31222ad4009f9346102aa7a8e5d770acc2333e7c91131f2e87adc1e9585b611e04285c4e4e6b198fe37caf38dea241ddc961e93316fef758e6e0bbac501a3f84c43588a30875433272562277542f8fb67248d074c9a6fb67fded2433237afac337c645f5a2ccb04b653556d206407c91b794185a35576d75998965b83e2a3cc5a543218e8c443687ed597618c50c18007b3922eb3fe60831ca08f1ec35960c976df7ea3ddc368dd09313c4de3eb22eef03adcdef81c5b1542cfe915f59be9eae2c18b8e2b94dad96f09f831d00a274ab6b29acda36c33306ae5ba082df1acb7a8edaf80f3004852fc790ae0709e6fa2c851b660a55ffbbfb359706314f6b92832c5d0786504ffda91f58b026705cf6aa7782ca600cea0e3e6f991dc08be1419bab6347f61d1677a417ab2c8b8f562abcce732735774354169ef45fd57285e8ad70ed9d90a409b424d3c8636fb532830c52c3009e0fee90fffaf886638fe6afea6e0103c74612069d84a2054890695889045642ece25f816320e5511035cc9ef61c05f3ade178654b397b2487534cadbde9030a52727d7ca5a8517f335f146af93c067bf80a5351fea1c8aefc786c2ab95dff37d95ff48bfdfaaa82de9b26994cd695ce00266bed4eb252f8a43e6e446694b9da624db6933734c3c2f058edd8df9a328d9598b5a301c7aef48334a67e703949914ee53c13592fdc5230d0e2f44771be207462dff87caa2bd3691d445fb450c0bd90ac6519c415a5d9e992aa2caec48c092959b21fda93422b4d4a205625cf1bc56529220d1c10743e112780156f5ce42cadbeb9829f4321ef9b0651d2686ec7f5b7eda8877cc2fa206faa910fb42e7d97112d9324a11a92917c3af083721dac8da4da55308e3b569b5d93f1875ca160949147fbef74dfd02e2fc287aa685805390a9ce8d14c2be527849192d171e361b612c7c5bfef0bcac8d352eecadd420c8b45af05cb5fdbd5fbc277733f628fa3f4eaa6003fe133518c991f07b840e0fef0036783d176c8281b26de7b23f9b9b64856b6844e8080aaec97fc60fe4418bd2dbd8ba0e77d1ac98b3a19313dec6813776d85631ca66ce4aa90e30fd1f7f53fada23a1424157b4b7b2d27bbe28bdd09a376ee5a0c0a6398c2da8c175597c871663ffc9cc8be2643c50a6805aad500c71b0569ae41c4acbe7b380821acaa8ac2ee729d7aa4c82659533ef6a8e4feb5765e45f7db4196c5732090bca14b8736f8dd93fb2bd1944a38632d6d7c8c2ed55592aacb41f9482957d22ab3cebe45dfd8a60be4ac128e792fa5a0a5ab251b45f595ed14510db5148f44dcb7249f2434f3ffc5f158b5bae7823e48ba02c938ee45c3c157a5a34001d12e9c2bcffc33b8d280d73a376360d68461c255bdfdd446d49ce17bcccf0af1ecbf7e737c291d0cb418bad42329e6d20fde3bbc576a2a5a84b53800ed9f9935b9b5f39643fa9bebaffcd76211610750ffb335b78c5ca89dc34fc40e2762e67863efb99b7c127745a76bf12d718130de36891bc854f6efca46070ef59fae905d2ac6f9a0e675e42e9215f0318d076190feef5c2afc692e68ab37514285f74ee3f9c27083565d35bf7316faab11af574caf6cc34ae9401013402237561af664d66585ad4db3a25b3aaacacbccc85e09bc677909aac92e0b39fc7664b5673b65a068babbf2880393e34bad83859bcdd0bf44feff7db6d8cd91cc052d692609c04d890e79493d74d6d56bfa9e269833dea69d2ec29db31c9da44d63d8d329ac3330f4b43449f01655d98fdf39ca5d18faf01961510144ee1c7ec2d6d070841235a1aad3312a7734ac26e5ca543dcc3d7b7f317c2d66c5a67a4fd08aa2d7a1f2a458dd88d23d7fcd3d978dc6b757dfae3b0e939abe24cf65cc3d8dfe22756bf211ebbace858cb6a90f9cf7f392bfed1cb959e854e03aeec2ee07a60f9b634e2374564b9fd25bfcf46e6e064d716576ab729a5f26ea2c75e23a3f62e9f544b72c12f00f79f8da9071088189801ed41ec92ca8ab6fedb2f898a31255a0347a1e9d0ac837af812b5763a8ce287f13ef5a3f51bf0397b154d786c90a3181a56ec7228353dfd5ab90c94e1fb67f6000594aca4408b0a66be5c55c5a2c7806b5e01fe06d3678b7d2814c08fc665a495874f5a82562e69569df7f1b6c5b7f6ce38ad8022d8a44f62875a06913007e88c839363ef9c7dff38d43e3b012f1faa72209d11c3f4c9dcda7ed53095f4cc0b7c4da4b02c928ca9fee903b440412347f427426ea9027be020e3a5ddc62804648d245af52d411c9f67aece6d0f394422ff4704f7642630fdbfb24258aae8df47d61acd45574641971476eb8a59221adda4b98c86d13e67a18b2663eed37d1ab540766d5e7fa49891b424dc1804b4e988875be72af26577fa510c438dcb7352845d1b171803e09b783ca8d9475cc540579c199d6a9134b71742b17b20d363c213c3cb71e2e7f32b0932084d0d9516fd8b6b61b5fafa0b99e5df41f88108704f733d37e3e19acd4af8262abbf4732f8ecbf0ecfb05b588e1da287e1d302fea808f2e28f58a8b162793463ef5e6e0aef05abf1fe43068c72c6493ccac8ba858efc98ddba4dbfb2dc7b505b5b09f0bdacb0a98aee867e43cdecfee9deb6912d83f17e399f8d11eab9990f1353286a5b255726c95667d4f47ef50b10f2119307d96ea65dc0adbae583ef3d42c0caafca8f08975503af78be51fcfbbec72bf63d2fe855322b47036bb771384d71cc0b2ab5dfcdd97368f7d3a5180ea7f8f6d11d33422b4852cb3bf90ebc5fd00f9716d45d34c3b92fe4e5d6799999efc771f2d3d29176df4835593372726ba09109ec4ca9161680e3d3212e7eaca97dc105e96adaeff78ac4e47c584c197c10eca83b32dca52badf21b48e1d47430bdba0f68156b67f09e58ff020a6c25def76f78ac1d3039be61a9b1ec0c914814d52d2d7e248a4f05f53cb8970f3d29223f021712e6fd85a278ed9aaae63b845de19764066707e6092e8086abe13a5356de58fa12ec9ce0e5090191ba9c3fafb174b3cc4b7ac9be2f6fff95519cd472724ef4b22494f28080b03eeced078341872aa5da29fc9b36dd71901678a188f1db8bea0b2008719f2ad95915d72b19b98f729b5e3e9b710ea21378c63d199dab92eb8ed9fa656f5346ab87d91d9f08eab774058a4594c8da96708d856959fffae0f8986d141481aced1fa7a5593fbd8b24c1df8e31cdf80d2d8d56dbdd7aa799eef74f415138036365a60d740ad3c7e13a4049b96f606b2286dd1f82494299684ebe423fdbbc1ad5298a7502025d8bd040e6b97caed83e6c66657fd8211ebd3468a9b6067ede0d30f52144ec59409d9b1d41c722ae17de316920b707477f95cdf6f990eea6ff43c6f4c8dedbef39fedceb38b16bf8cae59fc36451ba532d15641390d321c72a8065a01db2f611d4532dbf3d07bf47a3818b5e4afdfeafb972e39ce2349697c6bd34c1bbf81e6a369e87ebba327b38b3f9efc8ba667b0090b428dcd29b05a963f2a7c7f88b4dcabc0ea8bc950d21e1d3c415b1174942ce918e363d884eb544c4ad603faa100633bb46eba9a8149eaa340ce6df1856ab0100b0f5c8a69deaa8f79db5d6a0e65eaf8292b631e7fe106e847a3eabb861396d198027c139d7608dcc952eebb6b20568c2ec235806304503ae5d91b461cfde3574cfe770d1e0a5b957ee54ed4a48a0f69fcb66a239af9f6149bdf4cbca05c134a56a19abf9f9f2558acd09df5b3bffe91bf3d67ba108f8f4025734554dc7d0e64b5fddc44aa15d7928f493f17d164db6e4652a4940be41464169966aecc64a055efd856cb1542a96353924044be5a8e4eb4dc0c534563afd9fbcb6534242a3ff9499e55634a45567c5a4eee8da5c2117303075ad809ed68073121217b78ddceaaf2e80e7b14721b6d45454c5fff4365a41d31550d35268a1dffb7ad1cfc098a7ccbd126793b344971bc327c0383e3dd62aca306863f4cc8629f63fd95f7723684d2e35a1c0c1e875cde7c0da33818ed865f4479bc6b41d0556a73b9f793c1b5f58bdcd1be0634469955b4aa16c07290df30fe4a950502263a1551bd24426162bae39ba6de17af0d764ad139ad93e10950c869459f5a35962b0bd53d6fedd854272843284cdd0d4b51ed770ceda5fca2e621ba0c48db75025b7956b097155375c7418ddd3ff473d1f43826eb7afc92f8a92ea0ac733d3f24274769254bb532d187aa934ba6622fd2a4156a18f322e21ddfe61851e07909d205d5578434a94af4e2ca4440670b2660100e8c23fcabdafb14ddcddcdff608ed5386fb2afc3ee93ffcd357ff78579fa2f5f14bd36d9ee2adf364498ccaa1"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x5, 0x9, 0x0, 0x9, 0x210, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x10001}, 0x40, 0x9, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x2, r3, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x1f, 0x2, 0x8, 0x0, 0x8000, 0x10000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x10001, 0x101, 0x3, 0x7, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, r3, 0x3, r6, 0x4) readv(r3, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6) syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:43:21 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x400801, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffffff, 0xcf) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1ff}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd_index=0xa, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/70, 0x46}], 0x6, 0x19, 0x1}, 0x80000000) r5 = syz_open_dev$hiddev(&(0x7f0000000380), 0x9, 0x400002) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x5, {}, 0x6, 0x2, 0x0, {0x0, 0x0, r5}}, 0xfca) r6 = gettid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018007000", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c453000febe306a1f3d266387b1a5e0a5271baeb0cdb841fe747f2e2034cd0df8147d154a152de312b891b60625874e6f2ef793b9b51b5e0126f1b9e5"]) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x80, 0x7, 0x6, 0x1f, 0x0, 0x80, 0x44c0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0xff}, 0x48204, 0x800, 0x200, 0x7, 0x3, 0x7fffffff, 0x8, 0x0, 0x800, 0x0, 0x3}, r6, 0x5, r7, 0xa) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5606, &(0x7f0000000040)) [ 2743.304531] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2743.323852] FAULT_INJECTION: forcing a failure. [ 2743.323852] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.326360] CPU: 1 PID: 24838 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2743.327558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.328986] Call Trace: [ 2743.329448] dump_stack+0x107/0x167 [ 2743.330121] should_fail.cold+0x5/0xa [ 2743.330784] ? create_object.isra.0+0x3a/0xa20 [ 2743.331577] should_failslab+0x5/0x20 [ 2743.332226] kmem_cache_alloc+0x5b/0x310 [ 2743.332938] create_object.isra.0+0x3a/0xa20 [ 2743.333714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.334593] kmem_cache_alloc_trace+0x151/0x320 [ 2743.335413] __io_queue_proc+0x262/0x5a0 [ 2743.336113] ? io_poll_queue_proc+0x50/0x50 [ 2743.336854] n_tty_poll+0xba/0x8f0 [ 2743.337463] ? n_tty_ioctl+0x370/0x370 [ 2743.338144] tty_poll+0x144/0x1c0 [ 2743.338744] ? tty_release+0xe90/0xe90 [ 2743.339412] __io_arm_poll_handler+0x399/0x9e0 [ 2743.340211] __io_queue_sqe+0x52b/0x9d0 [ 2743.340902] ? io_issue_sqe+0x7700/0x7700 [ 2743.341627] ? io_poll_queue_proc+0x50/0x50 [ 2743.342369] ? io_prep_rw+0x7f5/0x1050 [ 2743.343034] io_submit_sqes+0x4461/0x85c0 [ 2743.343770] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2743.344616] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2743.345442] ? lock_downgrade+0x6d0/0x6d0 [ 2743.346153] ? find_held_lock+0x2c/0x110 [ 2743.346846] ? io_submit_sqes+0x85c0/0x85c0 [ 2743.347586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2743.348401] ? wait_for_completion_io+0x270/0x270 [ 2743.349222] ? rcu_read_lock_any_held+0x75/0xa0 [ 2743.350013] ? vfs_write+0x354/0xa70 [ 2743.350658] ? fput_many+0x2f/0x1a0 [ 2743.351276] ? ksys_write+0x1a9/0x260 [ 2743.351925] ? __ia32_sys_read+0xb0/0xb0 [ 2743.352616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.353500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.354396] do_syscall_64+0x33/0x40 [ 2743.355023] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.355895] RIP: 0033:0x7fb499895b19 [ 2743.356534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.359680] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2743.360983] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2743.362185] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2743.363361] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.364542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2743.365731] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:21 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffff8000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:21 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xad7}, 0x6a48, 0xffffffffffffff23, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7", 0x31, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) linkat(r0, &(0x7f00000006c0)='./file0\x00', r0, &(0x7f0000000180)='./file2\x00', 0x400) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) 01:43:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5607, &(0x7f0000000040)) 01:43:21 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x2, "77004a6efdff00", 0x400}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x100000000}}, './file0\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB]) signalfd4(r2, &(0x7f0000000140)={[0x200]}, 0x8, 0x80800) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) syz_io_uring_setup(0x15d7, &(0x7f0000000080)={0x0, 0xfffff540, 0x1, 0x0, 0x0, 0x0, r3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(r5, &(0x7f0000000280), &(0x7f00000002c0)=0xe, 0x0) dup3(r1, r0, 0x0) 01:43:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) [ 2743.736276] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2743.882689] FAULT_INJECTION: forcing a failure. [ 2743.882689] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.885302] CPU: 0 PID: 25219 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2743.886776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.888502] Call Trace: [ 2743.889064] dump_stack+0x107/0x167 [ 2743.889837] should_fail.cold+0x5/0xa [ 2743.890639] ? __io_queue_proc+0x262/0x5a0 [ 2743.891527] should_failslab+0x5/0x20 [ 2743.892325] kmem_cache_alloc_trace+0x55/0x320 [ 2743.893293] ? _raw_spin_unlock_irqrestore+0x38/0x40 01:43:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5608, &(0x7f0000000040)) [ 2743.894388] __io_queue_proc+0x262/0x5a0 [ 2743.895377] ? io_poll_queue_proc+0x50/0x50 [ 2743.896283] n_tty_poll+0xba/0x8f0 [ 2743.897019] ? n_tty_ioctl+0x370/0x370 [ 2743.897879] tty_poll+0x144/0x1c0 [ 2743.898640] ? tty_release+0xe90/0xe90 [ 2743.899441] __io_arm_poll_handler+0x399/0x9e0 [ 2743.900403] __io_queue_sqe+0x52b/0x9d0 [ 2743.901238] ? io_issue_sqe+0x7700/0x7700 [ 2743.902116] ? io_poll_queue_proc+0x50/0x50 [ 2743.903021] ? io_prep_rw+0x7f5/0x1050 [ 2743.903842] io_submit_sqes+0x4461/0x85c0 [ 2743.904739] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2743.905774] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2743.906786] ? lock_downgrade+0x6d0/0x6d0 [ 2743.907638] ? find_held_lock+0x2c/0x110 [ 2743.908491] ? io_submit_sqes+0x85c0/0x85c0 01:43:22 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffc000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2743.909397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2743.910458] ? wait_for_completion_io+0x270/0x270 [ 2743.911461] ? rcu_read_lock_any_held+0x75/0xa0 [ 2743.912417] ? vfs_write+0x354/0xa70 [ 2743.913191] ? fput_many+0x2f/0x1a0 [ 2743.913956] ? ksys_write+0x1a9/0x260 [ 2743.914742] ? __ia32_sys_read+0xb0/0xb0 [ 2743.915589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2743.916673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.917817] do_syscall_64+0x33/0x40 [ 2743.918587] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.919646] RIP: 0033:0x7fb499895b19 [ 2743.920423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.924220] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2743.925832] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2743.927303] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2743.928772] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.930255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2743.931723] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:22 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001480)=ANY=[@ANYBLOB="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"]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, 0x15, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r5, 0x6) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x300, 0x27, 0xd7bf4c7a26ebbc2d, 0x70bd2c, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@local}, @generic="36bf1bde8ab34bc73f2126a3a027961e93b7a76375fc3f271031ed4dc88774e61ef67f2ed1b5b09ea65e695cf0251a0c25c4a11fc223e45d84ccdb24124f8d2f23f4547e2aa726effa589ae0ba02f294f0a41c730b42b22dbcfdc9fa7be64d4e6ee064d837e48b6d91363f0d416f7dade54a2352d1c400d91c816c65ce7e951e72a187ced196fe1b68f9a0242b241970112fe5592196", @typed={0xe, 0x50, 0x0, 0x0, @str='/dev/ptmx\x00'}, @nested={0x21d, 0x8d, 0x0, 0x1, [@typed={0x4, 0x75}, @generic="af76bb8211437558272d2a365d400ce85e50b4212713192160a5a091dfbee645be0add3649471e38f280526c6733cfed939d6997d50ab0e35bfa1e5bd2d0d55baa58941388f3067774c84ca573939051174c1dc571c88ea5e3663d2b36a7288a", @generic="744037c3d2aef6a54798943ed4b03ff140bc5b5c53553be27d9469eaa31d3deba223bb732c13b638fa31659d9b6eac9b3b1dc9e74556766a9d476f280c3673eb2a60f1e6877a67cf65335d121cfd75137cf067bc31cb4d582337dab993530db0d1b1de6c13db3feace052f9a7203af3f3a1b9fa892e807e259894082a2a9c5322dd97ead431545f4dcbfe07c17930aa973b71b2ef65674ce9d29b2d727f601b8af50cc0d53cb01fa760678667fd0b72781f3499645b764b7c0f019d2e58468a2853bd8f62c63a50395714af3a76da00fef26f5b21100ff", @generic="52306c1363288259754047211f74661f8b37", @generic="8e174ca45b09665559d3392fbd8bc536927ef4f2a7be415d7ab91ddd1ec7c45bb17e0b98ed30c7cf2552fd51b9443909e98064bb766420d7dabc54b43cad577c5ed651b20fd8eee041117539e77832a46cb719a77c320c95989041e896be2ac92b928dd5ee26ae8a98bcb2fbe486021c6c93abc21d6dcf72abc17f28ffd39f78d152f1730151715f0bc6f3177f28a126a494b94646cf81e2607c3a4443743699694fa1e5c06070d243bdd63bc6c96601ea0d4cee", @typed={0x8, 0xf, 0x0, 0x0, @u32=0x3f}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x5}]}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0x8a6}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0xde8e}]}, 0x300}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) unshare(0x48020200) [ 2744.189783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=25281 comm=syz-executor.6 01:43:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd=r4}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001480)=ANY=[@ANYBLOB="0100000001000000180000003a14a701fbcaeb9e8d32bf121169f7ff7f0000000000005a860be2164ecdaa9ee30fb5a9c96ee698", @ANYRES32=r0, @ANYBLOB="8d000000000000002e2f66696c653008"]) inotify_add_watch(0xffffffffffffffff, 0x0, 0x280) close(0xffffffffffffffff) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4010, r4, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40c263, 0x0) io_uring_enter(r1, 0x6275, 0xdc9f, 0x1, &(0x7f0000000140)={[0x2]}, 0x8) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000001440)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001400)={&(0x7f0000000240), 0x80, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2}, 0x0, 0x41, 0x1, {0x1}}, 0x7) 01:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7", 0x31, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:38 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) clone3(&(0x7f0000000880)={0x0, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780), {0x6}, &(0x7f00000007c0)=""/11, 0xb, &(0x7f0000000800)=""/8, &(0x7f0000000840)=[r4, r4], 0x2, {r0}}, 0x58) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xd7, 0x4, 0xfa, 0xfd, 0x0, 0x3, 0x810, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0x2}, 0x0, 0x0, 0xffd, 0x1, 0x3, 0x1000, 0x200, 0x0, 0x0, 0x0, 0x401}, r5, 0x6, r1, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) sendmsg$inet6(r2, &(0x7f0000000280)={&(0x7f0000000180)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f00000001c0)="920599b00b020c47c7b7dcd32e4de6c21d268a08810a46a09ffb279b137fff0ce4452a9f4636dec4f4feaf20", 0x2c}, {&(0x7f0000000440)="350fe3c9739e625961e44826f2fb469b5404540cc2ce6ffec7ccb5f56b65ecca208fc7c7a0b8b0cbc12425455f11deaecad8b5450557aec13e5634d9c5293023fa730b2c19e91bbc626994f01c84dabb612ca77874cebdc977b72bad49f4086353987155f462fe5a5e43305f66414ba4cd4f4aff99c865609e7b3c3eb64e51a146611fb3f319235073aac9995833b2c6c072422bc094d4ef9e5e0fc2910753", 0x9f}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000370000003c0000000000001d00010004010600001400000000000000290000000b00000000000000000000001400000000000000290000003e0000003f000000000000001400000000000000290000003e0000003500000000000000"], 0x68}, 0x4008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000100)={0x7, 'team_slave_0\x00', {0x20}, 0x1f}) 01:43:38 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r4, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000400)={0x5, 0x18, [0x401, 0xffffffffffff8000, 0xac38, 0x9], &(0x7f0000000340)=[0x0, 0x0, 0x0]}) syz_open_procfs(r2, &(0x7f0000001540)='totmaps\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) unshare(0x28000080) 01:43:38 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:43:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x13) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 01:43:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5609, &(0x7f0000000040)) [ 2759.820693] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 2759.824506] FAULT_INJECTION: forcing a failure. [ 2759.824506] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.827021] CPU: 0 PID: 25398 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2759.828522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2759.830222] Call Trace: [ 2759.830765] dump_stack+0x107/0x167 [ 2759.831521] should_fail.cold+0x5/0xa [ 2759.832309] ? create_object.isra.0+0x3a/0xa20 [ 2759.833245] should_failslab+0x5/0x20 [ 2759.834035] kmem_cache_alloc+0x5b/0x310 [ 2759.834876] create_object.isra.0+0x3a/0xa20 [ 2759.835782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2759.836826] kmem_cache_alloc_trace+0x151/0x320 [ 2759.837792] __io_queue_proc+0x262/0x5a0 [ 2759.838645] ? io_poll_queue_proc+0x50/0x50 [ 2759.839530] n_tty_poll+0xba/0x8f0 [ 2759.840263] ? n_tty_ioctl+0x370/0x370 [ 2759.841070] tty_poll+0x144/0x1c0 [ 2759.841788] ? tty_release+0xe90/0xe90 [ 2759.842593] __io_arm_poll_handler+0x399/0x9e0 [ 2759.843548] __io_queue_sqe+0x52b/0x9d0 [ 2759.844374] ? io_issue_sqe+0x7700/0x7700 [ 2759.845223] ? io_poll_queue_proc+0x50/0x50 [ 2759.846117] ? io_prep_rw+0x7f5/0x1050 [ 2759.846925] io_submit_sqes+0x4461/0x85c0 [ 2759.847821] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2759.848845] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2759.849847] ? lock_downgrade+0x6d0/0x6d0 [ 2759.850717] ? find_held_lock+0x2c/0x110 [ 2759.851559] ? io_submit_sqes+0x85c0/0x85c0 [ 2759.852458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2759.853456] ? wait_for_completion_io+0x270/0x270 [ 2759.854464] ? rcu_read_lock_any_held+0x75/0xa0 [ 2759.855416] ? vfs_write+0x354/0xa70 [ 2759.856210] ? fput_many+0x2f/0x1a0 [ 2759.856984] ? ksys_write+0x1a9/0x260 [ 2759.857787] ? __ia32_sys_read+0xb0/0xb0 [ 2759.858671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2759.859775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2759.860877] do_syscall_64+0x33/0x40 [ 2759.861662] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2759.862752] RIP: 0033:0x7fb499895b19 [ 2759.863521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2759.867304] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2759.868874] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2759.870349] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2759.871808] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2759.873306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2759.875137] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560a, &(0x7f0000000040)) 01:43:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:38 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:38 executing program 0: r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x13, r3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0) readv(r4, &(0x7f0000001840)=[{&(0x7f0000000340)=""/96, 0x60}, {&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/180, 0xb4}, {&(0x7f0000001740)=""/92, 0x5c}, {&(0x7f00000017c0)=""/87, 0x57}], 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x6ce9, &(0x7f0000000100)={0x0, 0x2824, 0x1, 0x3, 0x49, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2000, @fd=r6, 0x10000, 0x7, 0x6, 0x13, 0x0, {0x2, r7}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) 01:43:38 executing program 5: lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f0000000340)={[{@huge_always}]}) [ 2760.145777] EXT4-fs error (device loop3): ext4_fill_super:4962: inode #2: comm syz-executor.3: iget: special inode unallocated [ 2760.147663] EXT4-fs (loop3): get root inode failed [ 2760.148248] EXT4-fs (loop3): mount failed [ 2760.296707] tmpfs: Unsupported parameter 'huge' 01:43:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x24eee24dc6289bd, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r3, 0x10000000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r6 = socket$inet6(0xa, 0x800, 0x2) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r6, 0x80, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x2710, @host}}, 0x1) fsetxattr(r4, &(0x7f0000000300)=@random={'osx.', '^\x00'}, &(0x7f0000000340)='\x00', 0x1, 0x2) sendfile(r2, r3, 0x0, 0x100000001) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) copy_file_range(r7, &(0x7f0000000200)=0x7, r0, &(0x7f0000000240)=0x2, 0x40, 0x0) 01:43:53 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:43:53 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x6}, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="00001b0000ce7c00cd97d723f5bd14b2e26fa82a4f7f8945ae13f8c51ab684c8e62ebeef10817a8a57bfa1f641e5af396f4e2ca45aff190445d871fb8613875f036e9988c1755e35e7a09934208d28305ed2fcca68b61e9c1c98fd525244f8e4b4a0e7fe6bb4", @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffe, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 01:43:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:43:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560b, &(0x7f0000000040)) 01:43:53 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4802, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000005340)={0x2, 0x0, @multicast1=0xac141436}, 0x10, &(0x7f0000001400)=[{&(0x7f00000000c0)="863c", 0x2}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x36}, @remote}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="c690d8bfdad627bb532bc4179c9c67b416f65f5ad5e7e184d65a0021a493b0d892e5126b4605190b940edc7ab45d1f3c13460f17a429a721fa976809746b0e83dbd75e5ec8cb81171fb76bade4247b1d4da75570110651ebcfb97b41df0e0e88d2fe587e2bc21c3d3c85d95e0eb747d24f0da75fe2da6dd6c6f2ca3e33d30abae0391879ad4afb172a4c646df1d285b41d858e76334b57f8377a1c611dbb257e6d", 0xa1}, {&(0x7f0000000280)="93ad3c9e532f06102bac16ab3e04e923b2856732b0750b911d65134c4fbe768ab3f55f765d5c0aa21ad178b266dbe33f587f7360560587c2e8bd3f7a80b7124dd403c42514a4c0a024ee50a0a2c0947178ba44ec82e441441b11c8b7eca59784e7a4b9fce494f88c77cf2271cd1226c1ab7df8c95962a03fabd1dc6d8fd7d33200f13025bbc2ff5edf688756e1700ff704e8409948233602acf74e80d32de5dcd1cfb2af227f4a67f95d4ee8376d524428516e149e8d641771ba2b1385a9d2f669d617f1dd0d6dc7f40203ba96de6772f71ab60e7e9d4bb591eb9f34", 0xdc}, {&(0x7f0000000380)="c226d164119366c9f86398ddaae04f073b328af937817f19b16c9d7a01fdd594439f50da20d16e923e89c120485bba109f55b233c6440c9578f9f63165cc11fffa627a1fe4bdd971cdeff03078aa15e480b7315acb9a8003e7ef8c805acce9da14db7b3e3f2fd9ad492d05299296eabd60bbcc9126685c345e5580bec82b7dc21c70387412b64b207ec1dac16395dc7560c567c2850f45af2d2caab511a7e05b5a5a2d98977c0cd19ab250513dd45c8aa3d1611b5f89509a1bfd8547479cadc916615166f4173980a05b0498390d33b8b13639babc61b7ec7bd6d3ff1579102c2c1b", 0xe2}, {&(0x7f0000000480)="3f62a501b4d96f4109e403a8de4a5bee4bde2e125aa4db959fa84aae7711254a1d5b180012b028b27b251a87eccef35ea8fb703e64711cb9823fadd007b4a118eeec2dfdd6e7bbc8a85345a64af03ba9d94cb0714c9749f246b4393c6271f06f4b1d6ba32f41c880737370e1d5d051e6d68717a4a0f9ab10b2c28f91cab2488418ffeef4b974419ddf5a600e60327475b94c3bcb045283979426c6510df86ae5556f6d5f0a6c2cfdcd14a074a1d76a2487c1dc3ee3d52611210c66285524de1fe21a", 0xc2}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000040)="d027058c1e59aff078a0e502d8567fff2904c7a0fc2f170dbdc84b4cfcbf828461bcb347652b39bcef8b37a8463fc8165167ca4d8f7a45b7f434f9d63f767386516154047d07177545e5008770", 0x4d}], 0x6, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}], 0x2, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000780)=""/33, &(0x7f00000007c0)=0x21) [ 2775.459951] FAULT_INJECTION: forcing a failure. [ 2775.459951] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.462782] CPU: 1 PID: 25737 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2775.464176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.465838] Call Trace: [ 2775.466384] dump_stack+0x107/0x167 [ 2775.467124] should_fail.cold+0x5/0xa [ 2775.467900] ? __io_queue_proc+0x262/0x5a0 [ 2775.468758] should_failslab+0x5/0x20 [ 2775.469523] kmem_cache_alloc_trace+0x55/0x320 [ 2775.470447] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2775.471471] __io_queue_proc+0x262/0x5a0 [ 2775.472286] ? io_poll_queue_proc+0x50/0x50 [ 2775.473149] n_tty_poll+0xba/0x8f0 [ 2775.473857] ? n_tty_ioctl+0x370/0x370 [ 2775.474679] tty_poll+0x144/0x1c0 [ 2775.475378] ? tty_release+0xe90/0xe90 [ 2775.476181] __io_arm_poll_handler+0x399/0x9e0 [ 2775.477109] __io_queue_sqe+0x52b/0x9d0 [ 2775.477912] ? io_issue_sqe+0x7700/0x7700 [ 2775.478760] ? io_poll_queue_proc+0x50/0x50 [ 2775.479628] ? io_prep_rw+0x7f5/0x1050 [ 2775.480414] io_submit_sqes+0x4461/0x85c0 [ 2775.481293] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2775.482302] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2775.483285] ? lock_downgrade+0x6d0/0x6d0 [ 2775.484119] ? find_held_lock+0x2c/0x110 [ 2775.484957] ? io_submit_sqes+0x85c0/0x85c0 [ 2775.485833] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2775.486848] ? wait_for_completion_io+0x270/0x270 [ 2775.487828] ? rcu_read_lock_any_held+0x75/0xa0 [ 2775.488767] ? vfs_write+0x354/0xa70 [ 2775.489545] ? fput_many+0x2f/0x1a0 [ 2775.490446] ? ksys_write+0x1a9/0x260 [ 2775.491316] ? __ia32_sys_read+0xb0/0xb0 [ 2775.492138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.493286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.494470] do_syscall_64+0x33/0x40 [ 2775.495221] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2775.496245] RIP: 0033:0x7fb499895b19 [ 2775.496988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.500649] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2775.502198] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2775.503624] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2775.505058] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.506517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.507957] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:43:53 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2775.527524] EXT4-fs error (device loop3): ext4_fill_super:4962: inode #2: comm syz-executor.3: iget: special inode unallocated [ 2775.547548] EXT4-fs (loop3): get root inode failed [ 2775.548822] EXT4-fs (loop3): mount failed 01:43:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560c, &(0x7f0000000040)) 01:43:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x23c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) copy_file_range(r3, &(0x7f0000000040)=0xa58, r4, &(0x7f0000000080), 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='(\x00') 01:43:54 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @remote}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:43:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000", 0x4a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:43:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560d, &(0x7f0000000040)) 01:43:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:43:54 executing program 6: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) syz_io_uring_setup(0x579f, &(0x7f0000000380)={0x0, 0xef1b}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) [ 2775.892685] EXT4-fs error (device loop3): ext4_fill_super:4962: inode #2: comm syz-executor.3: iget: special inode unallocated [ 2775.894782] EXT4-fs (loop3): get root inode failed [ 2775.895370] EXT4-fs (loop3): mount failed [ 2775.942844] FAULT_INJECTION: forcing a failure. [ 2775.942844] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.945203] CPU: 1 PID: 25982 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2775.946603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.948262] Call Trace: [ 2775.948796] dump_stack+0x107/0x167 [ 2775.949538] should_fail.cold+0x5/0xa [ 2775.950313] ? create_object.isra.0+0x3a/0xa20 [ 2775.951236] should_failslab+0x5/0x20 [ 2775.952004] kmem_cache_alloc+0x5b/0x310 [ 2775.952829] create_object.isra.0+0x3a/0xa20 [ 2775.953707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.954746] kmem_cache_alloc_trace+0x151/0x320 [ 2775.955683] __io_queue_proc+0x262/0x5a0 [ 2775.956494] ? io_poll_queue_proc+0x50/0x50 [ 2775.957355] n_tty_poll+0xba/0x8f0 [ 2775.958075] ? n_tty_ioctl+0x370/0x370 [ 2775.958867] tty_poll+0x144/0x1c0 [ 2775.959562] ? tty_release+0xe90/0xe90 [ 2775.960337] __io_arm_poll_handler+0x399/0x9e0 [ 2775.961261] __io_queue_sqe+0x52b/0x9d0 [ 2775.962060] ? io_issue_sqe+0x7700/0x7700 [ 2775.962909] ? io_poll_queue_proc+0x50/0x50 [ 2775.963774] ? io_prep_rw+0x7f5/0x1050 [ 2775.964560] io_submit_sqes+0x4461/0x85c0 [ 2775.965439] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2775.966440] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2775.967407] ? lock_downgrade+0x6d0/0x6d0 [ 2775.968229] ? find_held_lock+0x2c/0x110 [ 2775.969046] ? io_submit_sqes+0x85c0/0x85c0 [ 2775.969918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2775.970898] ? wait_for_completion_io+0x270/0x270 [ 2775.971861] ? rcu_read_lock_any_held+0x75/0xa0 [ 2775.972785] ? vfs_write+0x354/0xa70 [ 2775.973533] ? fput_many+0x2f/0x1a0 [ 2775.974294] ? ksys_write+0x1a9/0x260 [ 2775.975060] ? __ia32_sys_read+0xb0/0xb0 [ 2775.975895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.976939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.978005] do_syscall_64+0x33/0x40 [ 2775.978759] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2775.979779] RIP: 0033:0x7fb499895b19 [ 2775.980524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.984201] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2775.985722] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2775.987169] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2775.988594] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.990014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.991452] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:44:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:08 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x201800, 0x0) lseek(r1, 0x9, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 01:44:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x128000, 0xe2, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000005002000000000250000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000180c010000000000000000010e000000002200140100000000011400080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="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"/1408, 0x580, 0x8800}, {&(0x7f0000011000)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000011100)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000011200)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000011300)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011400)="0100020019000000ac59f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134364200000000000000", 0x60, 0x10000}, {&(0x7f0000011500)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011700)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011800)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011900)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011a00)="050002006d0000005003f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011c00)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011d00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011e00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011f00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000012000)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000012100)="01000200eb000000c007f001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134394300000000000000", 0x60, 0x18000}, {&(0x7f0000012200)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012400)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012500)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012600)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012700)="050002007d0000005003f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012800)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012900)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012a00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012b00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012c00)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012d00)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012e00)="09000200fe00000092ab7600400000007810e40709140b2a3a0000000100000000000000000000000c01000000000000000000000000000000000000000000000000000000000000010000002e00000000000000b9000000002a67656e69736f696d61676500000000000000000000000000000000000000050000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012f00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000013000)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000013100)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000013200)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000013300)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013400)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013500)="050102004c000000f4a6a800020000000000000004000000010000040000000000003002ffffffffffffffffa51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013600)="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"/288, 0x120, 0x82000}, {&(0x7f0000013800)="05010200280000000173a800040000000000000004000000010000040000000000003002ffffffffffffffffa51400000100000000000000540000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000540000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013900)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c653000"/96, 0x60, 0x83000}, {&(0x7f0000013a00)="050102001300000097c6a800060000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001700"/192, 0xc0, 0x83800}, {&(0x7f0000013b00)="0501020061000000a406a800070000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001800"/192, 0xc0, 0x84000}, {&(0x7f0000013c00)="050102008c000000c50fa800080000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001900"/192, 0xc0, 0x84800}, {&(0x7f0000013d00)="05010200ad000000ed07a800090000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001e00"/192, 0xc0, 0x85000}, {&(0x7f0000013e00)="05010200f80000004cf2a8000a0000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002300"/192, 0xc0, 0x85800}, {&(0x7f0000013f00)="01001401000001000000050015010000010046494c4530000000000000000000", 0x20, 0x86000}, {&(0x7f0000014000)="01000000011400010000050000000115000146494c4530000000000000000000", 0x20, 0x87000}, {&(0x7f0000014100)="010016010000010000000a0017010000010000660069006c0065003000000000", 0x20, 0x88000}, {&(0x7f0000014200)="010000000116000100000a0000000117000100660069006c0065003000000000", 0x20, 0x89000}, {&(0x7f0000014300)="2200140100000000011400080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012c00180100000000011864000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600150100000000011500080000000008007809140b2a3a08020000010000010546494c45302a0019010000000001190a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001f0100000000011f28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0x8a000}, {&(0x7f0000014500)="2200150100000000011500080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012a0024010000000001241a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x8a800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0019010000000001190a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001f0100000000011f28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b000}, {&(0x7f0000014800)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101012c0024010000000001241a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0x8b800}, {&(0x7f0000014900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8c000}, {&(0x7f0000014a00)='syzkallers\x00'/32, 0x20, 0x8c800}, {&(0x7f0000014b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000015000)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000015100)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000015200)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000015300)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000015400)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000015500)="00000000000000000000000000000000000000000000000001f800f80078000e0000000200000000ff01000400000b0000000001054344524f4d01000000000700000002db8cf0c2db8cf0c20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000200000300000000000000000000000001054344524f4d00000000000000000000000000000000000000000000000000001100000000020a4465736b746f7020444200020000004254464c444d475240000000000000000000001601b3000020000000200000000000000000000000db8cf0c2db8cf0c27c25cca000000000000000000000000000000000000001b300040000000000000000000000000000000000000000000000001100000000020a4465736b746f7020444600020000004454464c444d47524000000000000000000000170000000000000000000000000000000000000000db8cf0c2db8cf0c27c25cca000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000696c65320200000054455854756e69780000000000000000000000120119000023280000280000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011900050000000000000000000000000000000000000000000000000000000001f00186010e00960060000e0000000400000001ff01000300000f00000000020966696c652e636f6c640200000054455854756e69780000000000000000000000100117000000640000080000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011700010000000000000000000000000000000000000000000000000b00000000020566696c653001000000000100000014db8cf0c2db8cf0c27c25cca00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000000020566696c65310200000054455854756e697800000000000000000000001101180000000a0000080000000000000000000000db8cf0c2db8cf0c27c25cca00000000000000000000000000000000000000118000100000000000000000000000000000000000000000000000000000000011900050000000000000000000000000000000000000000000000000000000000020566696c65330200000054455854756e6978000000000000000000000013011e000023280000280000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011e0005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f001da014800d60084000e0000000000000000000200030000250000000001054344524f4d0000000000000000000000000000000000000000000000000000000000012500000000020966696c652e636f6c6400000000000000000000000000000000000000000000000000022500000000020566696c653200000000000000000000000000000000000000000000000000000000000400"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000015a00)="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", 0x220, 0xce7e0}, {&(0x7f0000015d00)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000015e00)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000015f00)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000016000)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000016100)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000016200)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}, {&(0x7f0000016300)="020002008700000001d7f001b901000000800000200000000080000030000000", 0x20, 0xdc800}, {&(0x7f0000016400)="020002008800000001d7f001ba01000000800000200000000080000030000000", 0x20, 0xdd000}, {&(0x7f0000016500)="020002008900000001d7f001bb01000000800000200000000080000030000000", 0x20, 0xdd800}, {&(0x7f0000016600)="020002008a00000001d7f001bc01000000800000200000000080000030000000", 0x20, 0xde000}, {&(0x7f0000016700)="020002008b00000001d7f001bd01000000800000200000000080000030000000", 0x20, 0xde800}, {&(0x7f0000016800)="020002008c00000001d7f001be01000000800000200000000080000030000000", 0x20, 0xdf000}, {&(0x7f0000016900)="020002008d00000001d7f001bf01000000800000200000000080000030000000", 0x20, 0xdf800}, {&(0x7f0000016a00)="020002008e00000001d7f001c001000000800000200000000080000030000000", 0x20, 0xe0000}, {&(0x7f0000016b00)="020002008f00000001d7f001c101000000800000200000000080000030000000", 0x20, 0xe0800}, {&(0x7f0000016c00)="020002009000000001d7f001c201000000800000200000000080000030000000", 0x20, 0xe1000}, {&(0x7f0000016d00)="020002009100000001d7f001c301000000800000200000000080000030000000", 0x20, 0xe1800}, {&(0x7f0000016e00)="020002009200000001d7f001c401000000800000200000000080000030000000", 0x20, 0xe2000}, {&(0x7f0000016f00)="020002009300000001d7f001c501000000800000200000000080000030000000", 0x20, 0xe2800}, {&(0x7f0000017000)="020002009400000001d7f001c601000000800000200000000080000030000000", 0x20, 0xe3000}, {&(0x7f0000017100)="020002009500000001d7f001c701000000800000200000000080000030000000", 0x20, 0xe3800}, {&(0x7f0000017200)="020002009600000001d7f001c801000000800000200000000080000030000000", 0x20, 0xe4000}, {&(0x7f0000017300)="020002009700000001d7f001c901000000800000200000000080000030000000", 0x20, 0xe4800}, {&(0x7f0000017400)="020002009800000001d7f001ca01000000800000200000000080000030000000", 0x20, 0xe5000}, {&(0x7f0000017500)="020002009900000001d7f001cb01000000800000200000000080000030000000", 0x20, 0xe5800}, {&(0x7f0000017600)="020002009a00000001d7f001cc01000000800000200000000080000030000000", 0x20, 0xe6000}, {&(0x7f0000017700)="020002009b00000001d7f001cd01000000800000200000000080000030000000", 0x20, 0xe6800}, {&(0x7f0000017800)="020002009c00000001d7f001ce01000000800000200000000080000030000000", 0x20, 0xe7000}, {&(0x7f0000017900)="020002009d00000001d7f001cf01000000800000200000000080000030000000", 0x20, 0xe7800}, {&(0x7f0000017a00)="020002009e00000001d7f001d001000000800000200000000080000030000000", 0x20, 0xe8000}, {&(0x7f0000017b00)="020002009f00000001d7f001d101000000800000200000000080000030000000", 0x20, 0xe8800}, {&(0x7f0000017c00)="02000200a000000001d7f001d201000000800000200000000080000030000000", 0x20, 0xe9000}, {&(0x7f0000017d00)="02000200a100000001d7f001d301000000800000200000000080000030000000", 0x20, 0xe9800}, {&(0x7f0000017e00)="02000200a200000001d7f001d401000000800000200000000080000030000000", 0x20, 0xea000}, {&(0x7f0000017f00)="02000200a300000001d7f001d501000000800000200000000080000030000000", 0x20, 0xea800}, {&(0x7f0000018000)="02000200a400000001d7f001d601000000800000200000000080000030000000", 0x20, 0xeb000}, {&(0x7f0000018100)="02000200a500000001d7f001d701000000800000200000000080000030000000", 0x20, 0xeb800}, {&(0x7f0000018200)="02000200a600000001d7f001d801000000800000200000000080000030000000", 0x20, 0xec000}, {&(0x7f0000018300)="02000200a700000001d7f001d901000000800000200000000080000030000000", 0x20, 0xec800}, {&(0x7f0000018400)="02000200a800000001d7f001da01000000800000200000000080000030000000", 0x20, 0xed000}, {&(0x7f0000018500)="02000200a900000001d7f001db01000000800000200000000080000030000000", 0x20, 0xed800}, {&(0x7f0000018600)="02000200aa00000001d7f001dc01000000800000200000000080000030000000", 0x20, 0xee000}, {&(0x7f0000018700)="02000200ab00000001d7f001dd01000000800000200000000080000030000000", 0x20, 0xee800}, {&(0x7f0000018800)="02000200ac00000001d7f001de01000000800000200000000080000030000000", 0x20, 0xef000}, {&(0x7f0000018900)="02000200ad00000001d7f001df01000000800000200000000080000030000000", 0x20, 0xef800}, {&(0x7f0000018a00)="02000200ae00000001d7f001e001000000800000200000000080000030000000", 0x20, 0xf0000}, {&(0x7f0000018b00)="02000200af00000001d7f001e101000000800000200000000080000030000000", 0x20, 0xf0800}, {&(0x7f0000018c00)="02000200b000000001d7f001e201000000800000200000000080000030000000", 0x20, 0xf1000}, {&(0x7f0000018d00)="02000200b100000001d7f001e301000000800000200000000080000030000000", 0x20, 0xf1800}, {&(0x7f0000018e00)="02000200b200000001d7f001e401000000800000200000000080000030000000", 0x20, 0xf2000}, {&(0x7f0000018f00)="02000200b300000001d7f001e501000000800000200000000080000030000000", 0x20, 0xf2800}, {&(0x7f0000019000)="02000200b400000001d7f001e601000000800000200000000080000030000000", 0x20, 0xf3000}, {&(0x7f0000019100)="02000200b500000001d7f001e701000000800000200000000080000030000000", 0x20, 0xf3800}, {&(0x7f0000019200)="02000200b600000001d7f001e801000000800000200000000080000030000000", 0x20, 0xf4000}, {&(0x7f0000019300)="02000200b700000001d7f001e901000000800000200000000080000030000000", 0x20, 0xf4800}, {&(0x7f0000019400)="02000200b800000001d7f001ea01000000800000200000000080000030000000", 0x20, 0xf5000}, {&(0x7f0000019500)="02000200b900000001d7f001eb01000000800000200000000080000030000000", 0x20, 0xf5800}, {&(0x7f0000019600)="02000200ba00000001d7f001ec01000000800000200000000080000030000000", 0x20, 0xf6000}, {&(0x7f0000019700)="02000200bb00000001d7f001ed01000000800000200000000080000030000000", 0x20, 0xf6800}, {&(0x7f0000019800)="02000200bc00000001d7f001ee01000000800000200000000080000030000000", 0x20, 0xf7000}, {&(0x7f0000019900)="02000200bd00000001d7f001ef01000000800000200000000080000030000000", 0x20, 0xf7800}, {&(0x7f0000019a00)="02000200be00000001d7f001f001000000800000200000000080000030000000", 0x20, 0xf8000}, {&(0x7f0000019b00)="02000200bf00000001d7f001f101000000800000200000000080000030000000", 0x20, 0xf8800}, {&(0x7f0000019c00)="02000200c000000001d7f001f201000000800000200000000080000030000000", 0x20, 0xf9000}, {&(0x7f0000019d00)="02000200c100000001d7f001f301000000800000200000000080000030000000", 0x20, 0xf9800}, {&(0x7f0000019e00)="02000200c200000001d7f001f401000000800000200000000080000030000000", 0x20, 0xfa000}, {&(0x7f0000019f00)="02000200c300000001d7f001f501000000800000200000000080000030000000", 0x20, 0xfa800}, {&(0x7f000001a000)="02000200c400000001d7f001f601000000800000200000000080000030000000", 0x20, 0xfb000}, {&(0x7f000001a100)="02000200c500000001d7f001f701000000800000200000000080000030000000", 0x20, 0xfb800}, {&(0x7f000001a200)="02000200c600000001d7f001f801000000800000200000000080000030000000", 0x20, 0xfc000}, {&(0x7f000001a300)="02000200c700000001d7f001f901000000800000200000000080000030000000", 0x20, 0xfc800}, {&(0x7f000001a400)="02000200c800000001d7f001fa01000000800000200000000080000030000000", 0x20, 0xfd000}, {&(0x7f000001a500)="02000200c900000001d7f001fb01000000800000200000000080000030000000", 0x20, 0xfd800}, {&(0x7f000001a600)="02000200ca00000001d7f001fc01000000800000200000000080000030000000", 0x20, 0xfe000}, {&(0x7f000001a700)="02000200cb00000001d7f001fd01000000800000200000000080000030000000", 0x20, 0xfe800}, {&(0x7f000001a800)="02000200cc00000001d7f001fe01000000800000200000000080000030000000", 0x20, 0xff000}, {&(0x7f000001a900)="02000200cd00000001d7f001ff01000000800000200000000080000030000000", 0x20, 0xff800}, {&(0x7f000001aa00)="02000200cf00000001d7f0010002000000800000200000000080000030000000", 0x20, 0x100000}, {&(0x7f000001ab00)="02000200d000000001d7f0010102000000800000200000000080000030000000", 0x20, 0x100800}, {&(0x7f000001ac00)="02000200d100000001d7f0010202000000800000200000000080000030000000", 0x20, 0x101000}, {&(0x7f000001ad00)="02000200d200000001d7f0010302000000800000200000000080000030000000", 0x20, 0x101800}, {&(0x7f000001ae00)="02000200d300000001d7f0010402000000800000200000000080000030000000", 0x20, 0x102000}, {&(0x7f000001af00)="02000200d400000001d7f0010502000000800000200000000080000030000000", 0x20, 0x102800}, {&(0x7f000001b000)="02000200d500000001d7f0010602000000800000200000000080000030000000", 0x20, 0x103000}, {&(0x7f000001b100)="02000200d600000001d7f0010702000000800000200000000080000030000000", 0x20, 0x103800}, {&(0x7f000001b200)="02000200d700000001d7f0010802000000800000200000000080000030000000", 0x20, 0x104000}, {&(0x7f000001b300)="02000200d800000001d7f0010902000000800000200000000080000030000000", 0x20, 0x104800}, {&(0x7f000001b400)="02000200d900000001d7f0010a02000000800000200000000080000030000000", 0x20, 0x105000}, {&(0x7f000001b500)="02000200da00000001d7f0010b02000000800000200000000080000030000000", 0x20, 0x105800}, {&(0x7f000001b600)="02000200db00000001d7f0010c02000000800000200000000080000030000000", 0x20, 0x106000}, {&(0x7f000001b700)="02000200dc00000001d7f0010d02000000800000200000000080000030000000", 0x20, 0x106800}, {&(0x7f000001b800)="02000200dd00000001d7f0010e02000000800000200000000080000030000000", 0x20, 0x107000}, {&(0x7f000001b900)="02000200de00000001d7f0010f02000000800000200000000080000030000000", 0x20, 0x107800}, {&(0x7f000001ba00)="02000200df00000001d7f0011002000000800000200000000080000030000000", 0x20, 0x108000}, {&(0x7f000001bb00)="02000200e000000001d7f0011102000000800000200000000080000030000000", 0x20, 0x108800}, {&(0x7f000001bc00)="02000200e100000001d7f0011202000000800000200000000080000030000000", 0x20, 0x109000}, {&(0x7f000001bd00)="02000200e200000001d7f0011302000000800000200000000080000030000000", 0x20, 0x109800}, {&(0x7f000001be00)="02000200e300000001d7f0011402000000800000200000000080000030000000", 0x20, 0x10a000}, {&(0x7f000001bf00)="02000200e400000001d7f0011502000000800000200000000080000030000000", 0x20, 0x10a800}, {&(0x7f000001c000)="02000200e500000001d7f0011602000000800000200000000080000030000000", 0x20, 0x10b000}, {&(0x7f000001c100)="02000200e600000001d7f0011702000000800000200000000080000030000000", 0x20, 0x10b800}, {&(0x7f000001c200)="02000200e700000001d7f0011802000000800000200000000080000030000000", 0x20, 0x10c000}, {&(0x7f000001c300)="02000200e800000001d7f0011902000000800000200000000080000030000000", 0x20, 0x10c800}, {&(0x7f000001c400)="02000200e900000001d7f0011a02000000800000200000000080000030000000", 0x20, 0x10d000}, {&(0x7f000001c500)="02000200ea00000001d7f0011b02000000800000200000000080000030000000", 0x20, 0x10d800}, {&(0x7f000001c600)="02000200eb00000001d7f0011c02000000800000200000000080000030000000", 0x20, 0x10e000}, {&(0x7f000001c700)="02000200ec00000001d7f0011d02000000800000200000000080000030000000", 0x20, 0x10e800}, {&(0x7f000001c800)="02000200ed00000001d7f0011e02000000800000200000000080000030000000", 0x20, 0x10f000}, {&(0x7f000001c900)="02000200ee00000001d7f0011f02000000800000200000000080000030000000", 0x20, 0x10f800}, {&(0x7f000001ca00)="02000200ef00000001d7f0012002000000800000200000000080000030000000", 0x20, 0x110000}, {&(0x7f000001cb00)="02000200f000000001d7f0012102000000800000200000000080000030000000", 0x20, 0x110800}, {&(0x7f000001cc00)="02000200f100000001d7f0012202000000800000200000000080000030000000", 0x20, 0x111000}, {&(0x7f000001cd00)="02000200f200000001d7f0012302000000800000200000000080000030000000", 0x20, 0x111800}, {&(0x7f000001ce00)="02000200f300000001d7f0012402000000800000200000000080000030000000", 0x20, 0x112000}, {&(0x7f000001cf00)="02000200f400000001d7f0012502000000800000200000000080000030000000", 0x20, 0x112800}, {&(0x7f000001d000)="02000200f500000001d7f0012602000000800000200000000080000030000000", 0x20, 0x113000}, {&(0x7f000001d100)="02000200f600000001d7f0012702000000800000200000000080000030000000", 0x20, 0x113800}, {&(0x7f000001d200)="02000200f700000001d7f0012802000000800000200000000080000030000000", 0x20, 0x114000}, {&(0x7f000001d300)="02000200f800000001d7f0012902000000800000200000000080000030000000", 0x20, 0x114800}, {&(0x7f000001d400)="02000200f900000001d7f0012a02000000800000200000000080000030000000", 0x20, 0x115000}, {&(0x7f000001d500)="02000200fa00000001d7f0012b02000000800000200000000080000030000000", 0x20, 0x115800}, {&(0x7f000001d600)="02000200fb00000001d7f0012c02000000800000200000000080000030000000", 0x20, 0x116000}, {&(0x7f000001d700)="02000200fc00000001d7f0012d02000000800000200000000080000030000000", 0x20, 0x116800}, {&(0x7f000001d800)="02000200fd00000001d7f0012e02000000800000200000000080000030000000", 0x20, 0x117000}, {&(0x7f000001d900)="02000200fe00000001d7f0012f02000000800000200000000080000030000000", 0x20, 0x117800}, {&(0x7f000001da00)="02000200ff00000001d7f0013002000000800000200000000080000030000000", 0x20, 0x118000}, {&(0x7f000001db00)="020002000000000001d7f0013102000000800000200000000080000030000000", 0x20, 0x118800}, {&(0x7f000001dc00)="020002000100000001d7f0013202000000800000200000000080000030000000", 0x20, 0x119000}, {&(0x7f000001dd00)="020002000200000001d7f0013302000000800000200000000080000030000000", 0x20, 0x119800}, {&(0x7f000001de00)="020002000300000001d7f0013402000000800000200000000080000030000000", 0x20, 0x11a000}, {&(0x7f000001df00)="020002000400000001d7f0013502000000800000200000000080000030000000", 0x20, 0x11a800}, {&(0x7f000001e000)="020002000500000001d7f0013602000000800000200000000080000030000000", 0x20, 0x11b000}, {&(0x7f000001e100)="020002000600000001d7f0013702000000800000200000000080000030000000", 0x20, 0x11b800}, {&(0x7f000001e200)="020002000700000001d7f0013802000000800000200000000080000030000000", 0x20, 0x11c000}, {&(0x7f000001e300)="020002000800000001d7f0013902000000800000200000000080000030000000", 0x20, 0x11c800}, {&(0x7f000001e400)="020002000900000001d7f0013a02000000800000200000000080000030000000", 0x20, 0x11d000}, {&(0x7f000001e500)="020002000a00000001d7f0013b02000000800000200000000080000030000000", 0x20, 0x11d800}, {&(0x7f000001e600)="020002000b00000001d7f0013c02000000800000200000000080000030000000", 0x20, 0x11e000}, {&(0x7f000001e700)="020002000c00000001d7f0013d02000000800000200000000080000030000000", 0x20, 0x11e800}, {&(0x7f000001e800)="020002000d00000001d7f0013e02000000800000200000000080000030000000", 0x20, 0x11f000}, {&(0x7f000001e900)="020002000e00000001d7f0013f02000000800000200000000080000030000000", 0x20, 0x11f800}, {&(0x7f000001ea00)="020002000f00000001d7f0014002000000800000200000000080000030000000", 0x20, 0x120000}, {&(0x7f000001eb00)="020002001000000001d7f0014102000000800000200000000080000030000000", 0x20, 0x120800}, {&(0x7f000001ec00)="020002001100000001d7f0014202000000800000200000000080000030000000", 0x20, 0x121000}, {&(0x7f000001ed00)="020002001200000001d7f0014302000000800000200000000080000030000000", 0x20, 0x121800}, {&(0x7f000001ee00)="020002001300000001d7f0014402000000800000200000000080000030000000", 0x20, 0x122000}, {&(0x7f000001ef00)="020002001400000001d7f0014502000000800000200000000080000030000000", 0x20, 0x122800}, {&(0x7f000001f000)="020002001500000001d7f0014602000000800000200000000080000030000000", 0x20, 0x123000}, {&(0x7f000001f100)="020002001600000001d7f0014702000000800000200000000080000030000000", 0x20, 0x123800}, {&(0x7f000001f200)="020002001700000001d7f0014802000000800000200000000080000030000000", 0x20, 0x124000}, {&(0x7f000001f300)="020002001800000001d7f0014902000000800000200000000080000030000000", 0x20, 0x124800}, {&(0x7f000001f400)="020002001900000001d7f0014a02000000800000200000000080000030000000", 0x20, 0x125000}, {&(0x7f000001f500)="020002001a00000001d7f0014b02000000800000200000000080000030000000", 0x20, 0x125800}, {&(0x7f000001f600)="020002001b00000001d7f0014c02000000800000200000000080000030000000", 0x20, 0x126000}, {&(0x7f000001f700)="020002001c00000001d7f0014d02000000800000200000000080000030000000", 0x20, 0x126800}, {&(0x7f000001f800)="020002001d00000001d7f0014e02000000800000200000000080000030000000", 0x20, 0x127000}, {&(0x7f000001f900)="020002001e00000001d7f0014f02000000800000200000000080000030000000", 0x20, 0x127800}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="de548ac0b77f090000007425250700"]) 01:44:08 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) signalfd(r0, &(0x7f0000000100)={[0x190]}, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:08 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000040)) 01:44:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:08 executing program 5: lseek(0xffffffffffffffff, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_DEL_TX_TS(r3, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x7d7) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) [ 2790.289367] FAULT_INJECTION: forcing a failure. [ 2790.289367] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.291901] CPU: 0 PID: 26099 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2790.293352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.295107] Call Trace: [ 2790.295662] dump_stack+0x107/0x167 [ 2790.296446] should_fail.cold+0x5/0xa [ 2790.297265] ? __io_queue_proc+0x262/0x5a0 [ 2790.298165] should_failslab+0x5/0x20 [ 2790.298989] kmem_cache_alloc_trace+0x55/0x320 [ 2790.299951] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2790.301021] __io_queue_proc+0x262/0x5a0 [ 2790.301874] ? io_poll_queue_proc+0x50/0x50 [ 2790.302786] n_tty_poll+0xba/0x8f0 [ 2790.303529] ? n_tty_ioctl+0x370/0x370 [ 2790.304355] tty_poll+0x144/0x1c0 [ 2790.305087] ? tty_release+0xe90/0xe90 [ 2790.305899] __io_arm_poll_handler+0x399/0x9e0 [ 2790.306880] __io_queue_sqe+0x52b/0x9d0 [ 2790.307720] ? io_issue_sqe+0x7700/0x7700 [ 2790.308585] ? io_poll_queue_proc+0x50/0x50 [ 2790.309491] ? io_prep_rw+0x7f5/0x1050 [ 2790.310351] io_submit_sqes+0x4461/0x85c0 [ 2790.311261] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2790.312301] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2790.313315] ? lock_downgrade+0x6d0/0x6d0 [ 2790.314176] ? find_held_lock+0x2c/0x110 [ 2790.315039] ? io_submit_sqes+0x85c0/0x85c0 [ 2790.315951] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2790.316974] ? wait_for_completion_io+0x270/0x270 [ 2790.317996] ? rcu_read_lock_any_held+0x75/0xa0 [ 2790.318980] ? vfs_write+0x354/0xa70 [ 2790.319750] ? fput_many+0x2f/0x1a0 [ 2790.320510] ? ksys_write+0x1a9/0x260 [ 2790.321320] ? __ia32_sys_read+0xb0/0xb0 [ 2790.322168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2790.323284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2790.324381] do_syscall_64+0x33/0x40 [ 2790.325165] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2790.326234] RIP: 0033:0x7fb499895b19 [ 2790.327022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.330860] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2790.332446] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2790.333930] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2790.335427] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.336918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.338413] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2790.413485] EXT4-fs (loop3): unsupported inode size: 0 [ 2790.414493] EXT4-fs (loop3): blocksize: 1024 [ 2790.427944] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 01:44:08 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80ffff00000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:08 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='mand\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000180)) 01:44:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x7f, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000380)={0x220120000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x3d}, &(0x7f0000000200)=""/116, 0x74, &(0x7f0000000280)=""/151, &(0x7f0000000340)}, 0x58) io_setup(0x2, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) io_pgetevents(r2, 0x80000080000020, 0x6, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)={r3, r4+60000000}, &(0x7f0000000580)={&(0x7f0000000940)={[0x9699]}, 0x8}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x55, 0x204200) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000400)={0x7ff, 0x1, 0xfffffffffffffff7, 0x1, 0x100, 0x1}) r8 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f00000008c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f00000005c0)="060bcd985fa19830d2f6e5051b98950d325bea38d07c5b2b73062bd50d8a07251115cec8eb32f4ee183655b01daf5aca63fbfb032d7cc92814081a75970c503b870c96822faf6d8dc952ce7819b54e5f699d073965a5b8052c96c973e65ff9e1078ccb2a6ef477f6232255d0ad8de3b6ca94689997f67a51e92fc37504be8dbe70ab6c4a4e0e739d16f4fb7a236a502be136e1026632f04f65ea27decfd7bb3c902b962d6c2d2cc7a4ecd78bcc1d71d8ee5ccbf0c09049fdfa08100849369a950ce1168de55f084a58b6b6de4ddf2fb02df85743828a4b404076ec13fb4a6936b15c01909a3c8b3ffd5e6590db4c32b8f4fb430d6938", 0xf6, 0x8, 0x0, 0x1, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x9, r7, &(0x7f0000000740)="843d9e7fd8849270623485", 0xb, 0xc27, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x5, 0x9, r8, &(0x7f00000007c0)="981f86f6b8e041fc8671e99c61293183d5c401cdf2b61be231aacc9c19700003e67a46f82b4ebef13b1c2ae6fd71eb240e2cb6884c3202960a5eb4bdf0a02a0072916032ac8563e7e2c35f25632ce09f97cc6c8a5add443124ece4ac31b2d93fbcb76f346581b6e6778d1ca091b9443bb89a25df861cfd2f85f24bcb08f50e9a9f545536033bf24c4c3f30e7d9", 0x8d, 0x0, 0x0, 0x1}]) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x6, 0x3, 0x1, 0x0, 0x6025798c, 0xb0c, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xee, 0x1, @perf_config_ext={0x95d, 0xff}, 0x41000, 0x0, 0x5, 0x3, 0x3fa, 0x13, 0x400, 0x0, 0x4, 0x0, 0x6}, r1, 0xf, r5, 0x8) 01:44:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:09 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018001c00", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000", @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) signalfd4(r3, &(0x7f0000000740), 0x8, 0xc00) sendmsg$NL80211_CMD_GET_COALESCE(r1, 0x0, 0x20000801) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000019c110f4f1aca54c6dacdb944a131c5c113af3cabbca87463d2ee539f15c7ec757b48265ece70034a6ebbc1c74f19608b6329f9e4c741543064dcb961d1e0ab3e07edc", @ANYRES16=r0, @ANYBLOB="000009000000fcdbdf25270000000c009900040000006500000006003600040000000a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x20044094) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280a0001", @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x220, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x404}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2105}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 01:44:09 executing program 5: lseek(0xffffffffffffffff, 0x4, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') sendmsg$NL80211_CMD_DEL_TX_TS(r3, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x7d7) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setlease(r0, 0x400, 0x0) [ 2790.769582] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2047 (only 16 groups) [ 2790.774604] FAULT_INJECTION: forcing a failure. [ 2790.774604] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.777231] CPU: 0 PID: 26331 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2790.778744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.780474] Call Trace: [ 2790.781028] dump_stack+0x107/0x167 [ 2790.781807] should_fail.cold+0x5/0xa [ 2790.782615] ? create_object.isra.0+0x3a/0xa20 [ 2790.783575] should_failslab+0x5/0x20 [ 2790.784370] kmem_cache_alloc+0x5b/0x310 [ 2790.785235] create_object.isra.0+0x3a/0xa20 [ 2790.786157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2790.787246] kmem_cache_alloc_trace+0x151/0x320 [ 2790.788232] __io_queue_proc+0x262/0x5a0 [ 2790.789083] ? io_poll_queue_proc+0x50/0x50 [ 2790.789989] n_tty_poll+0xba/0x8f0 [ 2790.790740] ? n_tty_ioctl+0x370/0x370 [ 2790.791556] tty_poll+0x144/0x1c0 [ 2790.792287] ? tty_release+0xe90/0xe90 [ 2790.793104] __io_arm_poll_handler+0x399/0x9e0 [ 2790.794065] __io_queue_sqe+0x52b/0x9d0 [ 2790.794919] ? io_issue_sqe+0x7700/0x7700 [ 2790.795788] ? io_poll_queue_proc+0x50/0x50 [ 2790.796705] ? io_prep_rw+0x7f5/0x1050 [ 2790.797526] io_submit_sqes+0x4461/0x85c0 [ 2790.798445] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2790.799492] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2790.800509] ? lock_downgrade+0x6d0/0x6d0 [ 2790.801374] ? find_held_lock+0x2c/0x110 [ 2790.802231] ? io_submit_sqes+0x85c0/0x85c0 [ 2790.803163] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2790.804179] ? wait_for_completion_io+0x270/0x270 [ 2790.805188] ? rcu_read_lock_any_held+0x75/0xa0 [ 2790.806159] ? vfs_write+0x354/0xa70 [ 2790.806947] ? fput_many+0x2f/0x1a0 [ 2790.807709] ? ksys_write+0x1a9/0x260 [ 2790.808506] ? __ia32_sys_read+0xb0/0xb0 [ 2790.809368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2790.810458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2790.811547] do_syscall_64+0x33/0x40 [ 2790.812320] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2790.813394] RIP: 0033:0x7fb499895b19 [ 2790.814175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.818037] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 01:44:09 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc0ffff00000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2790.819641] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2790.821266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 01:44:09 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x40, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2790.822795] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.824294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.825773] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2790.901346] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2047 (only 16 groups) 01:44:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac44664", 0x24, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="ea9fd02c6754a21e144f9334667f20d9eb1e9c8c7f62ab979027c24346faacc62b8b478eb8bf0a030e5ccff390654141ad510c85b5d679042b7770ddd60b7d0001000014e1b9c54825bd511a9bcc18000cbcc9b01388a86922153a11beab03d0d48a64837e79c111ec1200"/122, @ANYBLOB="f1f3d17d7831c30e9ab61470e53781099239f4a29bfde0496c452ac213dd6cdffd6622de83b138fd3793599f81ff402f5418b62f4e3c67fca700000000000036857aa4f7f6dd91758c16258da7bdcc1c655dcc7c2a92ff05a38fac25116f3a593f6b544e457e405d3d74554bac44fe4766fc96662a3b8bccf5eddc71bc07765a8fa3435d952d0db1fc1c98386023b343e2af2275b57a72cca15b61ade9b8ec92ce3c9b8c27f7827f68261bd32d9bfba87e5fd2da3ebc194025a5f58678d7b351206f9108660b6f1f249aef3c27f1db1a89744489d4de0443c62538b62a6bda96bab796ef2080c23a72d752ebdb"]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x4200, 0x2) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x7f, 0x9, 0xff, 0x0, 0x5, 0x600, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x100, 0xfff, 0x4, 0x5, 0xffffffffffffffff, 0x4, 0x10, 0x0, 0x1, 0x0, 0xfffffffffffffff7}, r1, 0x2, r2, 0x2) signalfd4(r0, &(0x7f0000000140)={[0x1000]}, 0x8, 0x800) [ 2790.975698] EXT4-fs (loop3): unsupported inode size: 0 [ 2790.976659] EXT4-fs (loop3): blocksize: 1024 [ 2790.991590] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 01:44:24 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4307, 0x3b009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0xfffffffc, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) fsync(r0) r1 = pidfd_open(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{}, {0xffffffff}, 0x1a4, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="ea83e625f4496350af6ca029df3c7d466154bb9b61f3c6833fd1087ab8382a5dbf007e4d5469df59446818eacbf592d8467fcc62ec5e9a608d3e6c87c5fab2dd64f398b757e64e675e0c8c810aab843e73e58f0c5e08d35efb88237adf4ffd8f2fa8a8df02c0116e867cef2ee6818b3e6b9722ded9660c6573669fa92993a71ee3cd1a45f985faa22a50acb653592d67a0cb78902cb748713704ffe95be0560f5f6c66f12b0d70edac62ead7171eec1aee1ac3b6b7a43a86d1fb4eb889719bbd", 0xc0, 0x0, &(0x7f0000000500)={0x2, 0x14d, {0x1, 0xc, 0x4a, "89e57fcd319056bdf50734b4160c83fc1611a5f733a8819bccade8a188f7799c025a4baf365bd08af28617322211495106f01938007b87298ce3e372f4d9fc84bec89c023ca102dedb8c", 0xf6, "62cb772d1c8cf92e3d5fbd924c4970b64d99ad50f17536c870eaea2d28747a4cbb75353529b2eb9282a08c9b0c414a2171956a472d221810c2fcd7bae9e1090c37f37a38c1eee46d2ea19294ddbb009495fad079eac4370590df1ba70578d6998b7c4d409d55abeaa37933b670e07677b89c63be9667b7035490f4f72a176342642bd743a47e088854847a76a924daecc5caf999718b697eb88bcf02779881f0df118cd997921bbb8df22e3a57c53c3f79ddd388b7a0d22096b77fa8fc8d2bfc83dc39020451de0a9ce57b4f9eedb24c8c966c9bb478dea7332a59c05a481062d3492ce1f5c939cbef68ae3cbf3b4e89cb37eefad121"}, 0xaf, "88d9c688621c385b07cf9271adf47eb565a381cff1686df87d0d857845fb1a60e3af6df5d0c8c5a0b7df30a7a34d16407d938d223098fc3c95bcef191d53acc642f16a9d7f2a2ce52d5c18516d226b7c60716977e3c91d8653994735d323e1aaf06d739b0e96f42af254fb4ec73e2d175ed5483391d16e6872d2fb1aa389b3464a30b79f3d35db29541d90fc76ed4d056bb29d817835c3e881d81066500287dbe6500d9ef18973d77bf572a179744b"}, 0x208}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001d00211700000900000000000400020012001180809801a7b0c7dba09475f251c7430000"], 0x28}}, 0x0) 01:44:24 executing program 6: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f00000000c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed410000000800001c00000000000000e0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6d629f2728fc1d6611b1dfbf504c99420695d89c61feefdaddc65068ac7d163f5dc22c27eda76cd47c191b6ef20ed2e2a918b5795a77e3d5c3c6eaec3c9534e69c16ad33599b3afb8a1fc52d"]) 01:44:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000040)) 01:44:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:24 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:24 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fsync(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x105142, 0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0x3) write$P9_RREADLINK(r4, 0x0, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 01:44:24 executing program 6: syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x200a00, 0xc2, 0x7}, 0x18) mount$cgroup(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x80, &(0x7f0000000300)={[{@none}, {@none}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@name={'name', 0x3d, '#({\\'}}, {@name={'name', 0x3d, 'fd/4\x00'}}, {}, {@cpuset_v2_mode}, {@noprefix}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2806.022533] FAULT_INJECTION: forcing a failure. [ 2806.022533] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.025177] CPU: 1 PID: 26571 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2806.026609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2806.028312] Call Trace: [ 2806.028862] dump_stack+0x107/0x167 [ 2806.029613] should_fail.cold+0x5/0xa [ 2806.030400] ? __io_queue_proc+0x262/0x5a0 [ 2806.031272] should_failslab+0x5/0x20 [ 2806.032039] kmem_cache_alloc_trace+0x55/0x320 [ 2806.032963] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2806.033998] __io_queue_proc+0x262/0x5a0 [ 2806.034841] ? io_poll_queue_proc+0x50/0x50 [ 2806.035721] n_tty_poll+0xba/0x8f0 [ 2806.036455] ? n_tty_ioctl+0x370/0x370 [ 2806.037246] tty_poll+0x144/0x1c0 [ 2806.037952] ? tty_release+0xe90/0xe90 [ 2806.038745] __io_arm_poll_handler+0x399/0x9e0 [ 2806.039681] __io_queue_sqe+0x52b/0x9d0 [ 2806.040507] ? io_issue_sqe+0x7700/0x7700 [ 2806.041345] ? io_poll_queue_proc+0x50/0x50 [ 2806.042224] ? io_prep_rw+0x7f5/0x1050 [ 2806.043044] io_submit_sqes+0x4461/0x85c0 [ 2806.043913] ? __mutex_lock+0x4fe/0x10b0 [ 2806.044756] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2806.045763] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2806.046777] ? io_submit_sqes+0x85c0/0x85c0 [ 2806.047656] ? recalibrate_cpu_khz+0x10/0x10 [ 2806.048551] ? ktime_get+0x158/0x1f0 [ 2806.049310] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2806.050177] ? clockevents_program_event+0x131/0x360 [ 2806.051215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2806.052270] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2806.053361] ? trace_hardirqs_on+0x5b/0x180 [ 2806.054237] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2806.055369] do_syscall_64+0x33/0x40 [ 2806.056120] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2806.057151] RIP: 0033:0x7fb499895b19 [ 2806.057901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2806.062091] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2806.063789] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2806.065488] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2806.067114] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.068715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2806.070382] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:44:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x40049409, &(0x7f0000000040)) [ 2806.079871] EXT4-fs (loop3): unsupported inode size: 0 [ 2806.081065] EXT4-fs (loop3): blocksize: 1024 01:44:24 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:24 executing program 7: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000280)={0x3, 0xffffffff, 0x7, 0x7, 0x5, 0x9}) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000200)=0x20) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) pread64(r3, &(0x7f0000000100)=""/232, 0xe8, 0x100000001) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100008000"]) [ 2806.239343] cgroup: Invalid name 01:44:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:24 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') readv(r1, &(0x7f0000000280), 0x1000000000000048) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x9e, 0x20, 0x2, 0x0, 0xfffffffffffffff4, 0x20, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0xf1697c5b1b947fdf, @perf_bp={&(0x7f0000000000), 0xc}, 0x50800, 0x7, 0x7, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, 0x4, r0, 0xa) [ 2806.417384] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 2806.478351] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 2806.511360] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:44:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:41 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r3 = fork() r4 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r4, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ptrace(0x4208, r4) sendmsg$nl_generic(r2, &(0x7f00000011c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38ad35b6d652271c421ed90c0723d79fbfe72169cfd907c6359c5e169927d4a858f8c9ae14f9ef9d241e00ee82f65ab0b9f5b9deeb3beec72fdb19f863b32d5e9ca4b8a1651af078f94b8ee4add30207b6deb4a8fb8a4bcefe21561a52b52f99900e3057986c3a73ee3c58b891e370c2f949e651ef31d38df968a90cb759e1c6ef32197123", @ANYRES32=r3, @ANYBLOB="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"], 0x1038}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001200)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6, 0x1f, 0x4, 0x100, 0x0, 0x50140, r1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:41 executing program 0: lseek(0xffffffffffffffff, 0x8, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00fb2a0305e90a7707000000d225f974ca0100fbf19f0d9ee601aec55cff9112ef2d82c109005c738a2a"], 0x2a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, r2, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f00000001c0)=""/25, 0x19}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}], 0x1, 0x40000000, &(0x7f0000000580)) statx(r5, &(0x7f0000000700)='./file0\x00', 0x1000, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r6, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2040, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_lt={'uid<', r3}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic}, {@smackfshat={'smackfshat', 0x3d, '@'}}, {@dont_hash}, {@uid_gt={'uid>', r6}}, {@seclabel}]}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) unshare(0x48020200) 01:44:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x40086602, &(0x7f0000000040)) 01:44:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000140), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) 01:44:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x81, 0x9, 0x9}) faccessat2(r2, 0x0, 0x30, 0x1000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r4) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x0, 0xfffffffb}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$netlink(r5, 0x0, &(0x7f0000000500)) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @loopback}, 0xc) 01:44:41 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2823.573765] FAULT_INJECTION: forcing a failure. [ 2823.573765] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.576824] CPU: 0 PID: 26931 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2823.578306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.580052] Call Trace: [ 2823.580611] dump_stack+0x107/0x167 [ 2823.581388] should_fail.cold+0x5/0xa [ 2823.582200] ? create_object.isra.0+0x3a/0xa20 [ 2823.583168] should_failslab+0x5/0x20 [ 2823.583963] kmem_cache_alloc+0x5b/0x310 [ 2823.584823] create_object.isra.0+0x3a/0xa20 [ 2823.585747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2823.586824] kmem_cache_alloc_trace+0x151/0x320 [ 2823.587808] __io_queue_proc+0x262/0x5a0 [ 2823.588660] ? io_poll_queue_proc+0x50/0x50 [ 2823.589562] n_tty_poll+0xba/0x8f0 [ 2823.590302] ? n_tty_ioctl+0x370/0x370 [ 2823.591141] tty_poll+0x144/0x1c0 [ 2823.591872] ? tty_release+0xe90/0xe90 [ 2823.592683] __io_arm_poll_handler+0x399/0x9e0 [ 2823.593650] __io_queue_sqe+0x52b/0x9d0 [ 2823.594488] ? io_issue_sqe+0x7700/0x7700 [ 2823.595362] ? io_poll_queue_proc+0x50/0x50 [ 2823.596263] ? io_prep_rw+0x7f5/0x1050 [ 2823.597086] io_submit_sqes+0x4461/0x85c0 [ 2823.597989] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2823.599046] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2823.600060] ? lock_downgrade+0x6d0/0x6d0 [ 2823.600922] ? find_held_lock+0x2c/0x110 [ 2823.601780] ? io_submit_sqes+0x85c0/0x85c0 [ 2823.602697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2823.603715] ? wait_for_completion_io+0x270/0x270 [ 2823.604725] ? rcu_read_lock_any_held+0x75/0xa0 [ 2823.605694] ? vfs_write+0x354/0xa70 [ 2823.606479] ? fput_many+0x2f/0x1a0 [ 2823.607250] ? ksys_write+0x1a9/0x260 [ 2823.608056] ? __ia32_sys_read+0xb0/0xb0 [ 2823.608912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2823.610008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2823.611112] do_syscall_64+0x33/0x40 [ 2823.611893] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.612963] RIP: 0033:0x7fb499895b19 [ 2823.613746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.617592] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2823.619190] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2823.620677] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2823.622158] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.623657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.625144] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2823.645867] EXT4-fs (loop3): unsupported inode size: 0 [ 2823.646582] EXT4-fs (loop3): blocksize: 1024 01:44:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x40087602, &(0x7f0000000040)) 01:44:42 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bb2dcc1d9820aaaaaaaaaa0086dd6096153f00103afffc000000000000000000000000000000ff02000000000000000000000000fa018600907800"/70], 0x0) 01:44:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:42 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:42 executing program 6: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, r0, 0x8000000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ff, 0x6, 0x0, {0x0, r4, r0}}, 0xfffff801) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) syz_io_uring_submit(r2, 0x0, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13, 0x1, {0x0, r4}}, 0x1f) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200681, 0x104) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="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") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x14, 0x7, 0x2, 0x201, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40004) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000340)='./file0\x00', 0x400000, 0x80) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x7, 0x0, 0x0, 0x5, 0x7}, 0x7) 01:44:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4020940d, &(0x7f0000000040)) [ 2823.908998] FAULT_INJECTION: forcing a failure. [ 2823.908998] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.911459] CPU: 0 PID: 27158 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2823.912588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.913857] Call Trace: [ 2823.914264] dump_stack+0x107/0x167 [ 2823.914833] should_fail.cold+0x5/0xa [ 2823.915420] ? __io_queue_proc+0x262/0x5a0 [ 2823.916075] should_failslab+0x5/0x20 [ 2823.916660] kmem_cache_alloc_trace+0x55/0x320 [ 2823.917347] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2823.918112] __io_queue_proc+0x262/0x5a0 [ 2823.918745] ? io_poll_queue_proc+0x50/0x50 [ 2823.919462] n_tty_poll+0xba/0x8f0 [ 2823.920003] ? n_tty_ioctl+0x370/0x370 [ 2823.920596] tty_poll+0x144/0x1c0 [ 2823.921117] ? tty_release+0xe90/0xe90 [ 2823.921743] __io_arm_poll_handler+0x399/0x9e0 [ 2823.922468] __io_queue_sqe+0x52b/0x9d0 [ 2823.923106] ? io_issue_sqe+0x7700/0x7700 [ 2823.923759] ? io_poll_queue_proc+0x50/0x50 [ 2823.924429] ? io_prep_rw+0x7f5/0x1050 [ 2823.925043] io_submit_sqes+0x4461/0x85c0 [ 2823.925710] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2823.926493] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2823.927267] ? lock_downgrade+0x6d0/0x6d0 [ 2823.927907] ? find_held_lock+0x2c/0x110 [ 2823.928556] ? io_submit_sqes+0x85c0/0x85c0 [ 2823.929245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2823.929992] ? wait_for_completion_io+0x270/0x270 [ 2823.930761] ? rcu_read_lock_any_held+0x75/0xa0 [ 2823.931488] ? vfs_write+0x354/0xa70 [ 2823.932094] ? fput_many+0x2f/0x1a0 [ 2823.932670] ? ksys_write+0x1a9/0x260 [ 2823.933108] EXT4-fs (loop3): unsupported inode size: 0 [ 2823.933271] ? __ia32_sys_read+0xb0/0xb0 [ 2823.933862] EXT4-fs (loop3): blocksize: 1024 [ 2823.934482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2823.934497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2823.934518] do_syscall_64+0x33/0x40 [ 2823.937137] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.937948] RIP: 0033:0x7fb499895b19 [ 2823.938527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.941425] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2823.942599] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2823.943724] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2823.944870] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.945984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.947104] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:44:42 executing program 5: ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4ca}}, './file0\x00'}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44000, 0xe) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x3ff, 0x80, 0x4ff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$dupfd(r3, 0xc4f0bc45b74a13b9, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0\x00', 0x41) getresuid(&(0x7f0000001440), &(0x7f0000001480)=0x0, &(0x7f00000014c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x4, &(0x7f00000013c0)=[{&(0x7f0000000200)="60ce1aef38e63b981744615a5962b7404f39aad15fb72c508e5dfc6db5a7a79db5e760670fd59723f81726a920aad65b6a8b2e36fa00668c", 0x38, 0x864e}, {&(0x7f0000000240)="ccd7324b8f90b4d71b3cd926408a82edb41247fe4cd198629608668ddc554d0609f686c48f3f751495989be0b9427700a7d9270a6f3f99f9f88d160d95660f00dd12e0fa358dc68f2731bcb039d5168164b86a0a3ea30b01afb1b9614f9fdefa8492043e288754eae54a289a181e2208c90a02c9b7326a7c378e4e6216e789c2d7883c4e3f3401a5acb9cd27493a2cd7801c5a227e20026ce290d4faa5ad223fd8a516eed897f0194329b762635627975a4d39a46529aed15f404fa481d59fd72163280fedf0fb9b7c92f515092cfd", 0xcf, 0x1}, {&(0x7f0000000340)="df7b6a4533a4f1bdfd25f6ade5dd5d97d2c7b5966f6c9e6cfd9355b0dfc555b7c9d270edf938f15db940ee531ea977228f6e21dd6df89479108cb60acd96fd21610d5a8e3c3d3e3c9eab09f08074c8d07caa7494976e135ea79261fb4b193bb39057b7964acc228a5f50c68ea9", 0x6d, 0x6}, {&(0x7f00000003c0)="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", 0x1000, 0x3}], 0x84000, &(0x7f0000001500)={[{@user_xattr}, {@bsdgroups}, {@sysvgroups}, {@block_validity}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r4}}, {@smackfshat}, {@uid_gt={'uid>', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, './+@%\x1b&'}}, {@euid_eq}]}) mount$9p_xen(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x400, &(0x7f00000016c0)={'trans=xen,', {[{@msize={'msize', 0x3d, 0x586a}}, {@aname={'aname', 0x3d, 'context'}}, {@version_9p2000}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'user_xattr'}}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, ']&:)$'}}, {@seclabel}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001780)=@IORING_OP_NOP={0x0, 0x2}, 0x5) setxattr$incfs_id(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) r5 = fcntl$dupfd(r2, 0x406, r0) pread64(r1, &(0x7f0000001880)=""/110, 0x6e, 0x1f) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000001900)={0x1000, 0x2, 0x0, 'queue1\x00', 0x80000000}) r6 = syz_open_dev$vcsu(&(0x7f00000019c0), 0x80, 0x105480) flock(r6, 0x0) 01:44:42 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x1259c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x40000001}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2824.044570] 9pnet: Could not find request transport: xen 01:44:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00", 0x56, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:44:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=[0x0, 0x0, &(0x7f00000002c0)='\x00'], 0x400) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6628) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000001c0)=[0xffff]) dup2(r4, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, 0x0}, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x107142, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xa0) signalfd(r1, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000380)) sendfile(r5, r3, 0x0, 0x7ffffff9) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10) fallocate(r2, 0x0, 0x0, 0x8004) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 01:44:58 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x30f000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x3, 0x0, 0xfffffffffffff42a, 0x80000000, 0x5, 0x8, 0x5, 0x0, 0x2, 0x102000, 0x0, 0x100, 0x4, 0xa9b}, 0x20, [0x0, 0x0, 0x0, 0x0]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x80045432, &(0x7f0000000040)) 01:44:59 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:59 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f0000000100)) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="1d23de7449ee513d0fbbb59dcf0b1bbac60fe6674c12730f11d2e4a1e5f805fa4b51984ac5bc8ca2939f684ddf22e6602e5bd13a291e12eb168fd3a24106088d1c278eafb335beb6e01629099e679c512f7219aa2f120c110a54e373ea9d3aaeb23dde64ff57a34a6b52aa10e55013c177ccf8a58eb34a2f8f5a64e95da56e9e9bb1de581df6f59867fe2d2005abe10959b04704", 0x94, 0x101}], 0x14041, &(0x7f0000000380)={[{@nojoliet}, {@dmode={'dmode', 0x3d, 0x2}}, {@map_normal}, {@unhide}, {@block}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^&:^/({%\\#-!'}}]}) dup2(0xffffffffffffffff, r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020000000000000120000000c0006000100000001000000050df6468de5a63ab0ce"], 0x20}, 0x1, 0x0, 0x0, 0x10000090}, 0x8000) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x16, &(0x7f0000000040), 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) read$hiddev(0xffffffffffffffff, &(0x7f0000000280)=""/175, 0xaf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 01:44:59 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) open(&(0x7f0000000140)='./file1\x00', 0x80, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bind$bt_hci(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="84803b169a6ff73938f203782efe59014ba01e1bcf6e6f5a0a331b827482b5c042642d48b92abf07e6086e706b77d80b9420f5862fb321f5873d61af2abdb1e23e02946f3a8c8e767d3f296b26278ca301dc0a66585e2ff8c5c48826caa490f121a423da2b20c428c6651329709eef91660e2b4463bfacb172cec8f8752e3066198c6b9021955aa36a5c3eb75d7696c5c321f77c157844f593ff806d2e821d3a774ccec0c25d499d47885790f59ada6b0acc16d2e779c4d08d84972e0f5247499565f6b072b2b5beb6032a4ac2401c1dfc538c24cd904f05b40dd13de80c518d21463c", 0xe3, 0x4000840, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x1, 0x2, 0x80, 0x1, "67beb46753789ca1f8d3a699d6a5dda13d103e0c9396864eb375c934fede64e9e72ef1bcfa209bc15e601be0250be815a3dbd246387a60304387e46cc6244f", 0x11}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x40) io_submit(0x0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 2840.665689] FAULT_INJECTION: forcing a failure. [ 2840.665689] name failslab, interval 1, probability 0, space 0, times 0 [ 2840.668314] CPU: 0 PID: 27387 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2840.669753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2840.671501] Call Trace: [ 2840.672063] dump_stack+0x107/0x167 [ 2840.672841] should_fail.cold+0x5/0xa [ 2840.673649] ? create_object.isra.0+0x3a/0xa20 [ 2840.674619] should_failslab+0x5/0x20 [ 2840.675437] kmem_cache_alloc+0x5b/0x310 [ 2840.676295] create_object.isra.0+0x3a/0xa20 [ 2840.677212] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2840.678276] kmem_cache_alloc_trace+0x151/0x320 [ 2840.679270] __io_queue_proc+0x262/0x5a0 [ 2840.680119] ? io_poll_queue_proc+0x50/0x50 [ 2840.681020] n_tty_poll+0xba/0x8f0 [ 2840.681764] ? n_tty_ioctl+0x370/0x370 [ 2840.682598] tty_poll+0x144/0x1c0 [ 2840.683342] ? tty_release+0xe90/0xe90 [ 2840.684144] __io_arm_poll_handler+0x399/0x9e0 [ 2840.685107] __io_queue_sqe+0x52b/0x9d0 [ 2840.685938] ? io_issue_sqe+0x7700/0x7700 [ 2840.686799] ? io_poll_queue_proc+0x50/0x50 [ 2840.687723] ? io_prep_rw+0x7f5/0x1050 [ 2840.688539] io_submit_sqes+0x4461/0x85c0 [ 2840.689443] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2840.690472] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2840.691492] ? lock_downgrade+0x6d0/0x6d0 [ 2840.692353] ? find_held_lock+0x2c/0x110 [ 2840.693205] ? io_submit_sqes+0x85c0/0x85c0 [ 2840.694115] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2840.695143] ? wait_for_completion_io+0x270/0x270 [ 2840.696149] ? rcu_read_lock_any_held+0x75/0xa0 [ 2840.697112] ? vfs_write+0x354/0xa70 [ 2840.697891] ? fput_many+0x2f/0x1a0 [ 2840.698651] ? ksys_write+0x1a9/0x260 [ 2840.699449] ? __ia32_sys_read+0xb0/0xb0 [ 2840.700297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2840.701383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2840.702463] do_syscall_64+0x33/0x40 [ 2840.703262] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2840.704328] RIP: 0033:0x7fb499895b19 [ 2840.705104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2840.708918] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2840.710496] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2840.711982] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2840.713462] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2840.714953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2840.716580] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:44:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x80045440, &(0x7f0000000040)) [ 2840.791233] EXT4-fs (loop3): unsupported inode size: 0 [ 2840.792469] EXT4-fs (loop3): blocksize: 1024 01:44:59 executing program 7: fsmount(0xffffffffffffffff, 0x1, 0x77) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:44:59 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:44:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:44:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) [ 2840.958058] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 01:44:59 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x1, 0x7, 0xffffffff, 0x100, 0x20, "02e65a9e57070d3441acbfa334cc3a476f6b7c", 0x9, 0x3}) 01:44:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x80086601, &(0x7f0000000040)) [ 2841.111930] FAULT_INJECTION: forcing a failure. [ 2841.111930] name failslab, interval 1, probability 0, space 0, times 0 [ 2841.113815] CPU: 0 PID: 27621 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2841.114917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2841.116253] Call Trace: [ 2841.116669] dump_stack+0x107/0x167 [ 2841.117246] should_fail.cold+0x5/0xa [ 2841.117844] ? create_object.isra.0+0x3a/0xa20 [ 2841.118564] should_failslab+0x5/0x20 [ 2841.119167] kmem_cache_alloc+0x5b/0x310 [ 2841.119806] create_object.isra.0+0x3a/0xa20 [ 2841.120497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2841.121300] kmem_cache_alloc_trace+0x151/0x320 [ 2841.122070] __io_queue_proc+0x262/0x5a0 [ 2841.122754] ? io_poll_queue_proc+0x50/0x50 [ 2841.123457] n_tty_poll+0xba/0x8f0 [ 2841.124030] ? n_tty_ioctl+0x370/0x370 [ 2841.124674] tty_poll+0x144/0x1c0 [ 2841.125256] ? tty_release+0xe90/0xe90 [ 2841.125912] __io_arm_poll_handler+0x399/0x9e0 [ 2841.126678] __io_queue_sqe+0x52b/0x9d0 [ 2841.127364] ? io_issue_sqe+0x7700/0x7700 [ 2841.128050] ? io_poll_queue_proc+0x50/0x50 [ 2841.128770] ? io_prep_rw+0x7f5/0x1050 [ 2841.129422] io_submit_sqes+0x4461/0x85c0 [ 2841.130161] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2841.130991] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2841.131814] ? lock_downgrade+0x6d0/0x6d0 [ 2841.132505] ? find_held_lock+0x2c/0x110 [ 2841.133170] ? io_submit_sqes+0x85c0/0x85c0 [ 2841.133909] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2841.133929] ? wait_for_completion_io+0x270/0x270 [ 2841.133955] ? rcu_read_lock_any_held+0x75/0xa0 [ 2841.136503] ? vfs_write+0x354/0xa70 [ 2841.137144] ? fput_many+0x2f/0x1a0 [ 2841.137759] ? ksys_write+0x1a9/0x260 [ 2841.138405] ? __ia32_sys_read+0xb0/0xb0 [ 2841.139117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2841.140005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2841.140895] do_syscall_64+0x33/0x40 [ 2841.141515] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2841.142381] RIP: 0033:0x7fb499895b19 [ 2841.143021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2841.146185] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2841.147488] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2841.148687] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2841.149903] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2841.151098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2841.152311] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:44:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x51) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], 0x0, 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x3, &(0x7f00000003c0)={0x0, 0x3938700}}, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl(0x9, &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000780)="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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r2, &(0x7f00000002c0)=0x80, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x0, 0x80000}, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 01:44:59 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2841.226656] EXT4-fs (loop3): unsupported inode size: 0 [ 2841.227656] EXT4-fs (loop3): blocksize: 1024 01:45:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:45:14 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) flock(r0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/29, 0x1d, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x8f2a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp(r1, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10110, 0xfffffffffffffffd, 0x1, 0x0, 0x80000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 01:45:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:45:14 executing program 6: preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/143, 0x8f}], 0x2, 0x10000, 0x8, 0xa6651f1a67c618f5) ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), 0x0, &(0x7f0000000980)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, 0x0) r3 = add_key(&(0x7f00000005c0)='ceph\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="ab69772083437dca1584f4359b8420545ebff7ce45612aa6f208491f7aa12a9af47fc1aed6c82ca8ae05ac4f2815d78163ec6e1ea72c726456a39cbcebd2f34e6e1d5dd3162106b34b6dfa0f63c39ca0b1aefadd4502a93b608cea415f70d356280fbbd35062bb5199ab3ad2c76d0f6339e6f6152471dd4be37b357155b91673a7fa9088364d4404", 0x88, 0xfffffffffffffffb) keyctl$search(0xa, 0x0, &(0x7f0000000140)='encrypted\x00', &(0x7f0000000580)={'syz', 0x3}, r3) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000900)={0x17512c080, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:45:14 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10002, 0x0, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1000, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000080, &(0x7f0000000340)=ANY=[@ANYBLOB='all,noprefix,noprefix,releaseWagent=./file0,cpuset_v2_mode,all,all,release_agent=@/file0,euid<', @ANYRESDEC=r3, @ANYBLOB=',\x00']) fchown(r2, r3, 0xee01) 01:45:14 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8531000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:45:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x80087601, &(0x7f0000000040)) 01:45:14 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2856.247453] EXT4-fs (loop3): unsupported inode size: 0 [ 2856.248641] EXT4-fs (loop3): blocksize: 1024 [ 2856.260558] cgroup: Unknown subsys name 'releaseWagent' [ 2856.264949] FAULT_INJECTION: forcing a failure. [ 2856.264949] name failslab, interval 1, probability 0, space 0, times 0 [ 2856.266769] CPU: 0 PID: 27866 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2856.267734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2856.268833] Call Trace: [ 2856.269205] dump_stack+0x107/0x167 [ 2856.269689] should_fail.cold+0x5/0xa [ 2856.270223] ? create_object.isra.0+0x3a/0xa20 [ 2856.270829] should_failslab+0x5/0x20 [ 2856.271368] kmem_cache_alloc+0x5b/0x310 [ 2856.271914] create_object.isra.0+0x3a/0xa20 [ 2856.272510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2856.273195] kmem_cache_alloc_trace+0x151/0x320 [ 2856.273839] __io_queue_proc+0x262/0x5a0 [ 2856.274381] ? io_poll_queue_proc+0x50/0x50 [ 2856.274970] n_tty_poll+0xba/0x8f0 [ 2856.275449] ? n_tty_ioctl+0x370/0x370 [ 2856.275981] tty_poll+0x144/0x1c0 [ 2856.276461] ? tty_release+0xe90/0xe90 01:45:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0xc0045878, &(0x7f0000000040)) [ 2856.277010] __io_arm_poll_handler+0x399/0x9e0 [ 2856.277820] __io_queue_sqe+0x52b/0x9d0 [ 2856.278406] ? io_issue_sqe+0x7700/0x7700 [ 2856.278972] ? io_poll_queue_proc+0x50/0x50 [ 2856.279580] ? io_prep_rw+0x7f5/0x1050 [ 2856.280148] io_submit_sqes+0x4461/0x85c0 [ 2856.280758] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2856.281489] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2856.282188] ? lock_downgrade+0x6d0/0x6d0 [ 2856.282745] ? find_held_lock+0x2c/0x110 [ 2856.283310] ? io_submit_sqes+0x85c0/0x85c0 [ 2856.283934] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2856.284619] ? wait_for_completion_io+0x270/0x270 [ 2856.285327] ? rcu_read_lock_any_held+0x75/0xa0 [ 2856.285948] ? vfs_write+0x354/0xa70 [ 2856.286470] ? fput_many+0x2f/0x1a0 [ 2856.286968] ? ksys_write+0x1a9/0x260 [ 2856.287549] ? __ia32_sys_read+0xb0/0xb0 [ 2856.288105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2856.288838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2856.289587] do_syscall_64+0x33/0x40 [ 2856.290088] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2856.290780] RIP: 0033:0x7fb499895b19 [ 2856.291326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2856.293962] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2856.295021] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2856.295972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2856.296958] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2856.297880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2856.298797] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 [ 2856.321007] cgroup: Unknown subsys name 'releaseWagent' 01:45:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:45:14 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc00c000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2856.498289] EXT4-fs (loop3): unsupported inode size: 0 [ 2856.499499] EXT4-fs (loop3): blocksize: 1024 01:45:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000030c0)='net/udp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0xff03, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x7, @remote, 0x3ff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000240)="087f747a45f3aa517847fb08e36b16db27c7ed04234fb6ac6e77969bd5f9123feb2194a6de81c8265ba1c0fe7f598922a0e0e1e432651589ecd4dac94cc85f0363b88c5243354f79d6524cff5372bfd2b59861472f1cd82bae68ced938bfcdb440ca6239149e9b9ed3159989a6b386cef4a40ae0385ebe013fb9a399805a08f863982333d1f309922bc14a82c2d9714a2a20dd6b9902f821b66e5b3a00c95ac56276a62f3cc373ae2b17fca4676c4183f7dfc4d41186d41c0ac43c078a5c7da0e7b0a4e27680f2220363a2ba8b6863a5e1cc05a353a02cf3f10d04eae9b6227c5d", 0xe1}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000003b0200000000000000000000000000000000ffffffffffff1400000000000000290000003e0000008000000000000000140000000000000029000000080000000500002000000000"], 0x58}, 0x4000080) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x12a8, 0x8, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000) 01:45:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0xc0045878, &(0x7f0000000040)) 01:45:33 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x400c004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) fsmount(r2, 0x1, 0x108) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x6c2fb2b8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x22902, 0x0) sendfile(r4, r1, &(0x7f00000000c0)=0x7, 0xf) fallocate(r4, 0x8, 0x5, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file1', [{0x20, '/proc/consoles\x00'}, {0x20, 'j\\'}, {0x20, '#\x8d]{'}, {}, {}], 0xa, "388dfe34a37592c207ae124444ec3f07bbb869a529e4ace0153a57eca98b3fde7de726d8604ca651b0803fa2768abd70339d20e0964f13a609222d512fb9e3f76b1cc05b73b035dca65516d0a344dd515259787f95194716cc9b09c571247ec7bf95532f3064f7e73a92a3cc9aa238bf8e6ad1ace4d3391641e938f0ce4ebe64d54e550787a273263a086af3c1b5762fdfb1bd624426ebe3e10ca62cca4431d0f5e32723714531917c937046fe6fb8df978e2c2399d229d179a73922012573659cbef1a6b1f33bef0f42f52c4fafe4bce7af9b4aeee827a0a733a9772f6f72a5fc6b5a75d34dc5d875e6"}, 0x10f) 01:45:33 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:45:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:45:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6(0xa, 0x3, 0x0) fchdir(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000480)=0x33) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x4, 0x3}]}, 0x14, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$KDSKBLED(r3, 0x4b65, 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9bb12466e6c15d66, @perf_config_ext={0xed14, 0xffffffff80000000}}, 0x0, 0xffffffffffffffff, r3, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 01:45:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200", 0x5b, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:45:33 executing program 5: execveat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(r1, &(0x7f0000000080)='./file0\x00', 0x109900, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x216000, 0x190) socket$netlink(0x10, 0x3, 0xe) 01:45:33 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x313280, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000180)=0x1, 0x4) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r7 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0xcf1b1d6cc25c493f, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff, r7, 0x100000}) fchmod(r6, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x101, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2875.226847] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 2875.350786] FAULT_INJECTION: forcing a failure. [ 2875.350786] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.353717] CPU: 0 PID: 28117 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2875.355258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.356975] Call Trace: [ 2875.357523] dump_stack+0x107/0x167 [ 2875.358282] should_fail.cold+0x5/0xa [ 2875.359066] ? create_object.isra.0+0x3a/0xa20 [ 2875.360016] should_failslab+0x5/0x20 [ 2875.360796] kmem_cache_alloc+0x5b/0x310 [ 2875.361639] create_object.isra.0+0x3a/0xa20 [ 2875.362541] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.363618] kmem_cache_alloc_trace+0x151/0x320 [ 2875.364586] __io_queue_proc+0x262/0x5a0 01:45:33 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0xa473, 0x2, 0x3, 0x7, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 2875.365441] ? io_poll_queue_proc+0x50/0x50 [ 2875.366456] n_tty_poll+0xba/0x8f0 [ 2875.367192] ? n_tty_ioctl+0x370/0x370 [ 2875.368006] tty_poll+0x144/0x1c0 [ 2875.368720] ? tty_release+0xe90/0xe90 [ 2875.369516] __io_arm_poll_handler+0x399/0x9e0 [ 2875.370464] __io_queue_sqe+0x52b/0x9d0 [ 2875.371287] ? io_issue_sqe+0x7700/0x7700 [ 2875.372146] ? io_poll_queue_proc+0x50/0x50 [ 2875.373039] ? io_prep_rw+0x7f5/0x1050 [ 2875.373845] io_submit_sqes+0x4461/0x85c0 [ 2875.374730] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2875.375766] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2875.376757] ? lock_downgrade+0x6d0/0x6d0 [ 2875.377601] ? find_held_lock+0x2c/0x110 [ 2875.378434] ? io_submit_sqes+0x85c0/0x85c0 [ 2875.379334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2875.380327] ? wait_for_completion_io+0x270/0x270 [ 2875.381312] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.382256] ? vfs_write+0x354/0xa70 [ 2875.383022] ? fput_many+0x2f/0x1a0 01:45:33 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @auto=[0x36, 0x10, 0x27]}, 0xb, 0xfffffffffffffffb) r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "a468f4311fafbd0d421f52d6a2089cb6db76aa57cb19213622eefd1cf6d263c0382781ae6d63ce654215e1393a285b86cdd3a70ac61741a219916e2a8a390725", 0x29}, 0x48, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "b1fed1c1ac2462c80d328a5868289ada628b0080be47802e73deedc1ac1127dd603f12500116097f95a941abc7bef90315a9d596b3c6af373309cf8a155ef452", 0x33}, 0x48, r0) r2 = request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', r0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000400)=@secondary) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r0) r4 = request_key(&(0x7f0000000540)='rxrpc_s\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', r0) request_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='\x00', 0xfffffffffffffffc) add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="1f6a1fb3c7a026586888fedb8ea2efb64a2d2673c29feac49e679b5044876b6601dc216421a4eae40f525794ee56103b4d12e7d4ac6bd9185001c2403e068db51a2fa8eb620546024419d14a531dfc778d76cb8f5ff66cf13557eb9e7ea9e40f85b48c935ff3e9e97568a6464d79072dcf23d7", 0x73, r1) r5 = add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="7da78505d5cb93455c3d78b6abeb7bb85a7ba61b5987c68a81ee7ba6cb31c3535c6106e09f36750df4b246e8107b07148772f3c5c2da0a25c62c922891fc1ed3399421ca651306b813caf017", 0x4c, r1) keyctl$search(0xa, r5, &(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={'syz', 0x1}, r2) r6 = add_key(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)="0db07fa8a8f7f7f84c6ed7d5923f54d5b32303872e933d64f0f23403d9a2585f4f4e029355f26ed690f67d2b92f58afd4366924be1ca0e6d1ea7ad0e5a020a2c27d3dcc0182c69fd6cade6bcb645d306c6f5ad1b2b2e01e5dff3293a58f8f1b616321fad1dc2fd47619eba3c5329fbc66abd4fcc0fb06e7beb955b367df6c420b9a8", 0x82, r6) keyctl$search(0xa, r7, &(0x7f0000000b80)='logon\x00', &(0x7f0000000bc0)={'syz', 0x2}, r4) keyctl$search(0xa, r6, &(0x7f0000000c00)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x2}, r3) add_key$keyring(&(0x7f0000000c80), &(0x7f0000000cc0)={'syz', 0x0}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 2875.383784] ? ksys_write+0x1a9/0x260 [ 2875.384626] ? __ia32_sys_read+0xb0/0xb0 [ 2875.385475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.386573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.387673] do_syscall_64+0x33/0x40 [ 2875.388458] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2875.389528] RIP: 0033:0x7fb499895b19 [ 2875.390300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.394110] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2875.395701] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2875.397170] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2875.398664] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.400148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.401627] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 01:45:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0xc0189436, &(0x7f0000000040)) 01:45:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 01:45:33 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf002000000000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) 01:45:34 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000dc0)="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", 0x913, 0x393}], 0x0, &(0x7f0000000240)=ANY=[]) ftruncate(r0, 0xfffffffffffffffd) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10002, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) sendfile(r1, r2, &(0x7f00000002c0)=0x8, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 01:45:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r1, 0xffff) write$P9_RREADLINK(r0, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESHEX], 0xfffffe19) 01:45:34 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xd6, 0x0, 0x4, 0xf7, 0x0, 0x77c, 0x2000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x90, 0x5b00000000000000, 0x4526, 0x5, 0x401, 0x100, 0x1000, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0xa) fcntl$dupfd(r4, 0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) fcntl$getownex(r8, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf4, 0x2, 0x81, 0x0, 0x7ff, 0x28280, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x420, 0x200, 0x9, 0x5, 0x34f, 0x4, 0x9, 0x0, 0x0, 0x0, 0x7ff}, r11, 0x0, r9, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5a}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004005}, 0x10010) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 01:45:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0xc020660b, &(0x7f0000000040)) 01:45:34 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) fallocate(r2, 0x4a, 0x9, 0xfbc2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r3, 0x29, 0x59, 0x1, 0x40, 0x41, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x20, 0x80000000, 0xffffffe1}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', r4, 0x10, 0x40, 0x8, 0x7f, {{0x40, 0x4, 0x2, 0x3c, 0x100, 0x65, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x100, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x4f, 0x1, 0x6, [{@multicast2, 0x1f}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@multicast1, 0xfffff801}, {@rand_addr=0x64010100, 0x10000}, {@private=0xa010101, 0x8}, {@private=0xa010101, 0x5}]}, @cipso={0x86, 0x3a, 0xffffffffffffffff, [{0x0, 0x3, "89"}, {0x1, 0xa, "0f6500ea4825195f"}, {0x0, 0xf, "e27f1c87438509be3132d6130e"}, {0x1, 0x4, "46f5"}, {0x0, 0xb, "c971e823394ba84d6d"}, {0x7, 0x9, "a28a623514c2d4"}]}, @timestamp={0x44, 0x14, 0x67, 0x0, 0x7, [0x1, 0x0, 0x2, 0xdb1e]}, @generic={0x7, 0x9, "a8381153b8e98f"}, @timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x8, [{@remote, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}, {@broadcast, 0x68c7}, {@loopback, 0x401}, {@empty, 0x3ff}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x4}]}, @timestamp={0x44, 0x1c, 0x37, 0x0, 0x2, [0x3ff, 0xfffffffb, 0x8, 0x6, 0x4, 0x7]}]}}}}}) 01:45:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0xe, 0x0, 0x13a, 0x0}) r1 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000240)="6623ed122eaa0e703cefb5", 0xb, 0x0, 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x400}, 0x0, 0x7fff, 0x8001, 0x0, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0x8001, 0x101, 0x80}) 01:45:34 executing program 4: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x13a, 0x0}) r0 = syz_io_uring_setup(0x2263, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000080)={0x0, 0x101}) [ 2876.019975] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:45:34 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:45:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)=0x2) [ 2876.108596] FAULT_INJECTION: forcing a failure. [ 2876.108596] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.110975] CPU: 1 PID: 28564 Comm: syz-executor.1 Not tainted 5.10.206 #1 [ 2876.113024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2876.115445] Call Trace: [ 2876.116223] dump_stack+0x107/0x167 [ 2876.117360] should_fail.cold+0x5/0xa [ 2876.118220] ? create_object.isra.0+0x3a/0xa20 [ 2876.119258] should_failslab+0x5/0x20 [ 2876.120141] kmem_cache_alloc+0x5b/0x310 [ 2876.121211] create_object.isra.0+0x3a/0xa20 [ 2876.122120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2876.123379] kmem_cache_alloc_trace+0x151/0x320 [ 2876.124428] __io_queue_proc+0x262/0x5a0 [ 2876.125413] ? io_poll_queue_proc+0x50/0x50 [ 2876.126453] n_tty_poll+0xba/0x8f0 [ 2876.127202] ? n_tty_ioctl+0x370/0x370 [ 2876.128087] tty_poll+0x144/0x1c0 [ 2876.128856] ? tty_release+0xe90/0xe90 [ 2876.129819] __io_arm_poll_handler+0x399/0x9e0 [ 2876.130745] __io_queue_sqe+0x52b/0x9d0 [ 2876.131565] ? io_issue_sqe+0x7700/0x7700 [ 2876.132505] ? io_poll_queue_proc+0x50/0x50 [ 2876.133385] ? io_prep_rw+0x7f5/0x1050 [ 2876.134172] io_submit_sqes+0x4461/0x85c0 [ 2876.135208] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2876.136238] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2876.137308] ? lock_downgrade+0x6d0/0x6d0 [ 2876.138254] ? find_held_lock+0x2c/0x110 [ 2876.139234] ? io_submit_sqes+0x85c0/0x85c0 [ 2876.140188] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2876.141284] ? wait_for_completion_io+0x270/0x270 [ 2876.142448] ? rcu_read_lock_any_held+0x75/0xa0 [ 2876.143397] ? vfs_write+0x354/0xa70 [ 2876.144146] ? fput_many+0x2f/0x1a0 [ 2876.144983] ? ksys_write+0x1a9/0x260 [ 2876.145895] ? __ia32_sys_read+0xb0/0xb0 [ 2876.146863] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2876.147918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2876.148952] do_syscall_64+0x33/0x40 [ 2876.149691] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2876.150713] RIP: 0033:0x7fb499895b19 [ 2876.151464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2876.155110] RSP: 002b:00007fb496e0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2876.156662] RAX: ffffffffffffffda RBX: 00007fb4999a8f60 RCX: 00007fb499895b19 [ 2876.158079] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2876.159507] RBP: 00007fb496e0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2876.160928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2876.162345] R13: 00007ffd3a4a1b7f R14: 00007fb496e0b300 R15: 0000000000022000 BUG: leak checking failed VM DIAGNOSIS: 01:45:35 Registers: info registers vcpu 0 RAX=ffffffff844e4625 RBX=dffffc0000000000 RCX=0000000000000005 RDX=0000000000000000 RSI=ffffffff850a5b18 RDI=ffffffff844e4620 RBP=ffffffff844e4620 RSP=ffff88800d4f7a98 R8 =0000000000000000 R9 =0000000000000001 R10=fffffbfff0ace501 R11=0000000000000001 R12=ffff88800d4f7b78 R13=ffffffff850a5b18 R14=0000000000000000 R15=ffffffff84efeb60 RIP=ffffffff81ff268f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe0c51c48c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe3000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555ef2c58 CR3=000000000d18a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=7269762f736563697665642f7379732f XMM01=6f6c622f6c6175747269762f73656369 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000560520c7d8f00000560520c6e760 XMM06=0000560520c7626000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e5f470 RBX=0000000000000001 RCX=ffffffff83e4752c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5fa78 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85672808 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5f47e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555558e9c58 CR3=0000000047370000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000